High · 7.1 CVE-2025-30583 EUVD-2025-7938GHSA-j7rr-hp2m-2rw4

WordPress Pro Rank Tracker plugin <= 1.0.0 - CSRF to Stored XSS Vulnerability

Published Mar 24, 2025 · Updated Apr 28, 2026 · Assigned by Patchstack

Vendor: ProRankTracker Product: Pro Rank Tracker

Description

Cross-Site Request Forgery (CSRF) vulnerability in ProRankTracker Pro Rank Tracker proranktracker allows Stored XSS.This issue affects Pro Rank Tracker: from n/a through <= 1.0.0.

Affected products

Vendor	Product	Affected	Fixed
ProRankTracker	Pro Rank Tracker	≤ 1.0.0	—

References

https://patchstack.com/database/Wordpress/Plugin/proranktracker/vulnerability/wordpress-pro-rank-tracker-plugin-1-0-0-csrf-to-stored-xss-vulnerability?_s_id=cve vdb-entry