Skip to content
OpenAdvisories
High · 7.1 CVE-2025-28860 EUVD-2025-7830GHSA-crp6-j9hr-46pc

WordPress Google News Editors Picks Feed Generator plugin <= 2.1 - CSRF to Stored XSS vulnerability

Published Mar 11, 2025 · Updated Apr 28, 2026 · Assigned by Patchstack

Description

Cross-Site Request Forgery (CSRF) vulnerability in PPDPurveyor Google News Editors Picks Feed Generator google-news-editors-picks-news-feeds allows Stored XSS.This issue affects Google News Editors Picks Feed Generator: from n/a through <= 2.1.

Affected products

VendorProductAffectedFixed
PPDPurveyor Google News Editors Picks Feed Generator ≤ 2.1 —

References