Skip to content
OpenAdvisories
High · 7.1 CVE-2025-49343 EUVD-2025-205881GHSA-h7h6-79g4-qpq3

WordPress Social Profilr plugin <= 1.0 - Cross Site Request Forgery (CSRF) vulnerability

Published Dec 31, 2025 · Updated Apr 28, 2026 · Assigned by Patchstack

Description

Cross-Site Request Forgery (CSRF) vulnerability in socialprofilr Social Profilr social-profilr-display-social-network-profile allows Stored XSS.This issue affects Social Profilr: from n/a through <= 1.0.

Affected products

VendorProductAffectedFixed
socialprofilr Social Profilr ≤ 1.0 —

References