Skip to main content

Wp Jquery Persian Datepicker

1 CVEs product

Monthly

CVE-2025-28861 Mar 11, 21:15 HIGH This Week

CSRF vulnerability in WP jQuery Persian Datepicker plugin for WordPress enables stored cross-site scripting attacks through versions up to 0.1.0. Attackers can trick authenticated administrators into submitting malicious payloads that persist in the application, enabling later exploitation against other users. EPSS score of 0.05% (14th percentile) indicates low observed exploitation probability, and no public exploit code exists at time of analysis.

WordPress XSS CSRF Wordpress Plugin Wp Jquery Persian Datepicker
NVD
CVSS 3.1
7.1
EPSS
0.0%
EPSS 0% CVSS 7.1
HIGH This Week

CSRF vulnerability in WP jQuery Persian Datepicker plugin for WordPress enables stored cross-site scripting attacks through versions up to 0.1.0. Attackers can trick authenticated administrators into submitting malicious payloads that persist in the application, enabling later exploitation against other users. EPSS score of 0.05% (14th percentile) indicates low observed exploitation probability, and no public exploit code exists at time of analysis.

WordPress XSS CSRF +2
NVD

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy