High · 7.1 CVE-2025-53315 EUVD-2025-28512GHSA-6394-9pmf-24rm

WordPress Relocate Upload plugin <= 0.24.1 - Cross Site Request Forgery (CSRF) Vulnerability

Published Jun 27, 2025 · Updated Apr 28, 2026 · Assigned by Patchstack

Description

Cross-Site Request Forgery (CSRF) vulnerability in alanft Relocate Upload relocate-upload allows Stored XSS.This issue affects Relocate Upload: from n/a through <= 0.24.1.

Affected products

Vendor	Product	Affected	Fixed
alanft	Relocate Upload	≤ 0.24.1	—

References

https://patchstack.com/database/Wordpress/Plugin/relocate-upload/vulnerability/wordpress-relocate-upload-plugin-0-24-1-cross-site-request-forgery-csrf-vulnerability?_s_id=cve vdb-entry