TI-2025-03415 CVE-2025-3867 · GHSA-fhwh-5w3x-c8g5
Ajax Comment Form CST <= 1.2 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Priority LOW 27
The Ajax Comment Form CST plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.2.