Connector to CiviCRM with CiviMcRestFace vulnerabilities

Product

Connector to CiviCRM with CiviMcRestFace

by Jaap Jansma · last CVE Apr 11, 2025

CVEs

On KEV

7.1

Max CVSS

New 30D

Severity mix

Critical 0High 1Medium 1Low 0

Severity

Exploitation

Watch

Add Connector to CiviCRM with CiviMcRestFace to your stack to get only the CVEs that touch what you run.

CVE	CVSS	EPSS	Published	Summary · affected versions
CVE-2025-32551	7.1	0%	Apr 11	WordPress Connector to CiviCRM with CiviMcRestFace plugin <= 1.0.8 - Reflected Cross Site Scripting (XSS) vulnerability Affected: through 1.0.8