CVEDB API

Vulnerabilities

By Date
Known Exploited
Advanced Search

Vulnerable Software

Vendors
Products

Vulnerability Details CVE-2025-28861

Cross-Site Request Forgery (CSRF) vulnerability in bhzad WP jQuery Persian Datepicker wpjqp-datepicker allows Stored XSS.This issue affects WP jQuery Persian Datepicker: from n/a through <= 0.1.0.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.001

EPSS Ranking 23.5%

CVSS Severity

CVSS v3 Score 7.1

References

https://patchstack.com/database/Wordpress/Plugin/wpjqp-datepicker/vulnerability/wordpress-wp-jquery-persian-datepicker-plugin-0-1-0-csrf-to-stored-xss-vulnerability?_s_id=cve

Products affected by CVE-2025-28861

Bhzad » Wp Jquery Persian Datepicker » Version: 0.1.0

cpe:2.3:a:bhzad:wp_jquery_persian_datepicker:0.1.0

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2025-28861

Products

Pricing

Contact Us