High · 7.1 CVE-2025-30558 EUVD-2025-7961GHSA-pv39-24mp-673c

WordPress ANAC XML Render plugin <= 1.5.7 - CSRF to Stored XSS vulnerability

Published Mar 24, 2025 · Updated Apr 28, 2026 · Assigned by Patchstack

Vendor: EnzoCostantini55 Product: ANAC XML Render

Description

Cross-Site Request Forgery (CSRF) vulnerability in EnzoCostantini55 ANAC XML Render anac-xml-render allows Stored XSS.This issue affects ANAC XML Render: from n/a through <= 1.5.7.

Affected products

Vendor	Product	Affected	Fixed
EnzoCostantini55	ANAC XML Render	≤ 1.5.7	—

References

https://patchstack.com/database/Wordpress/Plugin/anac-xml-render/vulnerability/wordpress-anac-xml-render-plugin-1-5-7-csrf-to-stored-xss-vulnerability?_s_id=cve vdb-entry