CVE-2025-30528

CRITICAL

Cross-Site Request Forgery (CSRF) vulnerability in wpshopee Awesome Logos awesome-logos allows SQL Injection.This issue affects Awesome Logos: from n/a through <= 1.2.

Affects 0 products across 1 vendor.

CVSS 3.19.3
EPSS0.3%
Percentile16th
PatchUnknown
CVSS Vector — Plain English Remotely exploitable over the network, low complexity, no authentication required, no user interaction needed, can impact systems beyond the vulnerable component, full confidentiality impact, no integrity impact.
CWE Weakness Definitions
CWE-352: Cross-Site Request Forgery (CSRF)

Web application does not verify that a request was intentionally sent by the authenticated user.

Related Attack Patterns (CAPEC)
CAPEC-462 Cross-Domain Search Timing
via CWE-352
CAPEC-467 Cross Site Identification
via CWE-352
CAPEC-62 Cross Site Request Forgery
via CWE-352
CAPEC-111 JSON Hijacking (aka JavaScript Hijacking)
via CWE-352

Mapping is CWE-to-CAPEC per MITRE CAPEC 3.9.

◆ AI Analysis — automated analysis, not human-reviewed

A critical vulnerability in the wpshopee Awesome Logos plugin, versions up to and including 1.2, allows attackers to perform Cross-Site Request Forgery (CSRF) attacks that can lead to SQL Injection, potentially compromising the database and leading to unauthorized data access or manipulation.

BSID: BS-2025-GLOBAL-251677-C • Model: /workspace/models/qwen2.5-coder-32b-instruct-bf16 • Confidence: HIGH

Is this CVE in your environment?

BreachSpider monitors your ICS/OT environment for vulnerabilities like this one. No agents or network access required. Free to start.

Check My Environment →
Frequently Asked Questions
What is CVE-2025-30528?
A critical vulnerability in the wpshopee Awesome Logos plugin, versions up to and including 1.2, allows attackers to perform Cross-Site Request Forgery (CSRF) attacks that can lead to SQL Injection, potentially compromising the database and leading to unauthorized data access or manipulation.
What is the CVSS score for CVE-2025-30528?
CVE-2025-30528 has CVSS 9.3 (Critical). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:L. EPSS: 0.3%.
Is CVE-2025-30528 actively exploited?
No confirmed active exploitation of CVE-2025-30528 as of 2026-05-30.
How do I remediate CVE-2025-30528?
Priority: IMMEDIATE.
What systems are affected by CVE-2025-30528?
CVE-2025-30528 affects Awesome.
Vulnerability Details
CVE IDCVE-2025-30528
BSIDBS-2025-GLOBAL-251677-C BreachSpider Global ID
CVSS VectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:L
Published2025-03-24
Last Modified2026-04-23
ICS Relevance0%
Weakness (CWE)
Cross-Site Request Forgery (CSRF)
SourceNVD
Official Description

Cross-Site Request Forgery (CSRF) vulnerability in wpshopee Awesome Logos awesome-logos allows SQL Injection.This issue affects Awesome Logos: from n/a through <= 1.2.

Source: NIST NVD / MITRE CVE Database

Attack Vector Analysis — CITED Relevance

An attacker can craft a malicious request that, when visited by an authenticated user, can execute unauthorized actions on the wpshopee Awesome Logos plugin. This can lead to SQL Injection, allowing the attacker to manipulate or extract sensitive data from the database.

Exploitation Likelihood: CRITICAL

Affected Products
VendorProductAffected Versions
Awesome — —
Remediation

No official vendor advisory link on record. See the CVE record →

Threat Intelligence
● Threat Intelligence Validated: October 2026 | Threat Age: 570 Days
CISA known-exploitedNot in KEV catalog
Public ExploitNot confirmed
PoC CodeNot confirmed
AI Enrichment Record — provenance & audit hash
Model/workspace/models/qwen2.5-coder-32b-instruct-bf16
ConfidenceHIGH
Enriched At2026-05-24
SHA-512 Audit Hashf78a5434006e0abffc515ef7efa86c43685d7ee7cb19c8901ee30dee5a7491fb942c0eb2bea1790a44c3f4a4feb87cde3ec850942e2eb4402ff680e2455527db
Related CVEs affecting Awesome
CVE-2024-13232 8.8 The WordPress Awesome Import & Export Plugin - Import & Export WordPress Data... CVE-2024-13567 7.5 The Awesome Support – WordPress HelpDesk & Support Plugin plugin for WordPres... CVE-2025-58662 7.2 Deserialization of Untrusted Data vulnerability in awesomesupport Awesome Sup... CVE-2025-53312 7.1 Cross-Site Request Forgery (CSRF) vulnerability in Looks Awesome OnionBuzz on... CVE-2025-62933 7.1 Cross-Site Request Forgery (CSRF) vulnerability in Prakash Awesome Testimonia...
View all Awesome CVEs →

Critical Severity - Know Your Exposure

A CVSS 9.3 vulnerability in your ICS environment cannot wait. BreachSpider maps critical CVEs to your specific assets and tells you what to fix first.

Create a free account →