Skip to content
OpenAdvisories
High · 7.1 CVE-2025-58217 EUVD-2025-25918GHSA-m3j9-7wcp-qmh8

WordPress Instant Breaking News Plugin <= 1.0 - Cross Site Request Forgery (CSRF) Vulnerability

Published Aug 27, 2025 · Updated Apr 28, 2026 · Assigned by Patchstack

Description

Cross-Site Request Forgery (CSRF) vulnerability in GeroNikolov Instant Breaking News instant-breaking-news allows Stored XSS.This issue affects Instant Breaking News: from n/a through <= 1.0.

Affected products

VendorProductAffectedFixed
GeroNikolov Instant Breaking News ≤ 1.0 —

References