High · 7.1 CVE-2025-49354 EUVD-2025-205880GHSA-hjcx-w529-729v

WordPress Recent Posts From Each Category plugin <= 1.4 - Cross Site Request Forgery (CSRF) vulnerability

Published Dec 31, 2025 · Updated Apr 28, 2026 · Assigned by Patchstack

Vendor: Mindstien Technologies Product: Recent Posts From Each Category

Description

Cross-Site Request Forgery (CSRF) vulnerability in Mindstien Technologies Recent Posts From Each Category recent-posts-from-each-category allows Stored XSS.This issue affects Recent Posts From Each Category: from n/a through <= 1.4.

Affected products

Vendor	Product	Affected	Fixed
Mindstien Technologies	Recent Posts From Each Category	≤ 1.4	—

References

https://patchstack.com/database/Wordpress/Plugin/recent-posts-from-each-category/vulnerability/wordpress-recent-posts-from-each-category-plugin-1-4-cross-site-request-forgery-csrf-vulnerability?_s_id=cve vdb-entry