Medium · 5.3 CVE-2025-49896 EUVD-2025-28331GHSA-gvff-qxfc-g43p

WordPress WP Discord Post Plus – Supports Unlimited Channels plugin <= 1.0.2 - Cross Site Request Forgery (CSRF) vulnerability

Published Aug 20, 2025 · Updated Apr 28, 2026 · Assigned by Patchstack

Vendor: wptasker Product: WP Discord Post Plus – Supports Unlimited Channels

Description

Cross-Site Request Forgery (CSRF) vulnerability in wptasker WP Discord Post Plus – Supports Unlimited Channels allows Cross Site Request Forgery. This issue affects WP Discord Post Plus – Supports Unlimited Channels: from n/a through 1.0.2.

Affected products

Vendor	Product	Affected	Fixed
wptasker	WP Discord Post Plus – Supports Unlimited Channels	≤ 1.0.2	—

References

https://patchstack.com/database/wordpress/plugin/wp-discord-post-plus/vulnerability/wordpress-wp-discord-post-plus-supports-unlimited-channels-plugin-1-0-2-cross-site-request-forgery-csrf-vulnerability?_s_id=cve vdb-entry