High · 7.1 CVE-2025-32610 EUVD-2025-10603GHSA-5633-fxcw-h329

WordPress Foliopress WYSIWYG plugin <= 2.6.18 - CSRF to Stored XSS vulnerability

Published Apr 9, 2025 · Updated Apr 28, 2026 · Assigned by Patchstack

Vendor: foliovision Product: Foliopress WYSIWYG

Description

Cross-Site Request Forgery (CSRF) vulnerability in FolioVision Foliopress WYSIWYG foliopress-wysiwyg allows Cross Site Request Forgery.This issue affects Foliopress WYSIWYG: from n/a through <= 2.6.18.

Affected products

Vendor	Product	Affected	Fixed
FolioVision	Foliopress WYSIWYG	≤ 2.6.18	—

References

https://patchstack.com/database/Wordpress/Plugin/foliopress-wysiwyg/vulnerability/wordpress-foliopress-wysiwyg-plugin-2-6-18-csrf-to-stored-xss-vulnerability?_s_id=cve vdb-entry