Description
Cross-Site Request Forgery (CSRF) vulnerability in Callmeforsox Post Thumbs allows Stored XSS.
This issue affects Post Thumbs: from n/a through 1.5.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Callmeforsox | Post Thumbs | ≤ 1.5 | — |
High · 7.1
CVE-2025-26569
EUVD-2025-4225GHSA-7hrh-v62r-6754
WordPress Post Thumbs Plugin <= 1.5 - CSRF to Stored XSS vulnerability
Published Feb 13, 2025 · Updated May 27, 2026 · Assigned by Patchstack