CVE-2025-27009

7.1

Critical

CVE-2025-27009

14 Apr 2025

audit@patchstack.com

Awaiting Analysis

Description

Cross-Site Request Forgery (CSRF) vulnerability in wphocus My auctions allegro allows Stored XSS.This issue affects My auctions allegro: from n/a through 3.6.20.

Exploits

No known exploits found for this CVE.

Search Exploit-DB

References

audit@patchstack.com

https://patchstack.com/database/wordpress/plugin/my-auctions-allegro-free-edition/vulnerability/wordpress-my-auctions-allegro-plugin-3-6-20-cross-site-request-forgery-csrf-vulnerability?_s_id=cve