Skip to content
OpenAdvisories
High · 7.1 CVE-2025-48353 EUVD-2025-26025GHSA-5cg6-6f7f-388q

WordPress Clickbank WordPress Plugin (Niche Storefront) plugin <= 1.3.5 - Cross Site Request Forgery (CSRF) to Stored XSS vulnerability

Published Aug 28, 2025 · Updated Apr 28, 2026 · Assigned by Patchstack

Vendor: dactum Product: Clickbank WordPress Plugin (Niche Storefront) Category: Web / CMS

Description

Cross-Site Request Forgery (CSRF) vulnerability in dactum Clickbank WordPress Plugin (Niche Storefront) clickbank-niche-storefronts allows Stored XSS.This issue affects Clickbank WordPress Plugin (Niche Storefront): from n/a through <= 1.3.5.

Affected products

VendorProductAffectedFixed
dactum Clickbank WordPress Plugin (Niche Storefront) ≤ 1.3.5 —

References