Skip to content
OpenAdvisories
High · 7.1 CVE-2025-27009 EUVD-2025-10878GHSA-6578-c2px-x699

WordPress My auctions allegro plugin <= 3.6.33 - Cross Site Request Forgery (CSRF) vulnerability

Published Apr 14, 2025 · Updated Apr 28, 2026 · Assigned by Patchstack

Description

Cross-Site Request Forgery (CSRF) vulnerability in wphocus My auctions allegro my-auctions-allegro-free-edition allows Stored XSS.This issue affects My auctions allegro: from n/a through <= 3.6.33.

Affected products

VendorProductAffectedFixed
wphocus My auctions allegro ≤ 3.6.33 —

References