Cross-Site Request Forgery Vulnerability in BP Profile as Homepage by Jatinder Pal Singh

CVE-2025-49453

What is CVE-2025-49453?

A Cross-Site Request Forgery (CSRF) vulnerability exists in the BP Profile as Homepage plugin developed by Jatinder Pal Singh. This security flaw permits attackers to execute stored cross-site scripting (XSS) attacks, which could lead to unauthorized actions being performed on behalf of the user without their consent. The affected versions of the plugin include those from n/a to 1.1, making it crucial for users to update their installations to safeguard against possible exploits.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch →

References