High · 7.1 CVE-2025-53329 EUVD-2025-28518GHSA-g4h8-599f-hvw2

WordPress Społecznościowa 6 PL 2013 plugin <= 2.0.6 - Cross Site Request Forgery (CSRF) Vulnerability

Published Jun 27, 2025 · Updated Apr 28, 2026 · Assigned by Patchstack

Vendor: szajenw Product: Społecznościowa 6 PL 2013

Description

Cross-Site Request Forgery (CSRF) vulnerability in szajenw Społecznościowa 6 PL 2013 spolecznosciowa-6-pl-2013 allows Stored XSS.This issue affects Społecznościowa 6 PL 2013: from n/a through <= 2.0.6.

Affected products

Vendor	Product	Affected	Fixed
szajenw	Społecznościowa 6 PL 2013	≤ 2.0.6	—

References

https://patchstack.com/database/Wordpress/Plugin/spolecznosciowa-6-pl-2013/vulnerability/wordpress-spolecznosciowa-6-pl-2013-plugin-2-0-6-cross-site-request-forgery-csrf-vulnerability?_s_id=cve vdb-entry