Reflected XSS Vulnerability in PillarDev Easy Automatic Newsletter Lite
CVE-2025-23879
Key Information:
- Vendor
WordPress
- Vendor
- CVE Published:
- 3 March 2025
What is CVE-2025-23879?
A reflected XSS vulnerability exists in the PillarDev Easy Automatic Newsletter Lite plugin, allowing an attacker to inject malicious scripts into web pages generated by the plugin. This can lead to unauthorized actions performed on behalf of users visiting the affected site. The vulnerability affects versions of the plugin from n/a through 3.2.0, exposing users to potential data theft or session hijacking. Proper input validation and output encoding measures should be implemented to mitigate the risks associated with this vulnerability.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.
Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.
Affected Version(s)
Easy Automatic Newsletter Lite <= 3.2.0
References
CVSS V3.1
Timeline
Vulnerability published
Vulnerability Reserved