TI-2025-18816 CVE-2025-25147 · GHSA-jrfq-mc4w-x44qWordPress Auto SEO plugin <= 2.5.6 - CSRF to Stored XSS vulnerabilityPriority LOW 30Cross-Site Request Forgery (CSRF) vulnerability in Phillip.Gooch Auto SEO auto-seo allows Stored XSS.This issue affects Auto SEO: from n/a through <= 2.5.6.CVSS 3.1HIGH 7.1· Network · No auth · User interaction · EPSS 0.0013 · Published 2025-02-07 · No fix listed CWE-352