TI-2025-17611 CVE-2025-23844 · GHSA-j94g-6g26-v5g2
WordPress Custom Widget Classes plugin <= 1.1 - CSRF to Stored XSS vulnerability
Priority LOW 31
Cross-Site Request Forgery (CSRF) vulnerability in Jamsheer K Custom Widget Classes custom-widget-classes allows Cross Site Request Forgery.This issue affects Custom Widget Classes: from n/a through <= 1.1.