The vulnerability CVE-2025-23511 affects the WP-BlackCheck plugin by Stargazer and is classified as a CSRF issue that enables stored XSS attacks. It impacts all versions up to 2.7.2. The CVSS 3.1 vector indicates the attack can be performed remotely over the network with low attack complexity, no privileges required, but user interaction is needed. The vulnerability affects confidentiality, integrity, and availability to a limited extent. No patch or vendor advisory is currently available to confirm remediation status.

Successful exploitation could allow an attacker to execute stored XSS attacks via CSRF, potentially compromising user sessions or injecting malicious scripts. The impact includes limited confidentiality, integrity, and availability loss as indicated by the CVSS vector. There are no reports of active exploitation in the wild.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, users should consider disabling or limiting the use of the WP-BlackCheck plugin to reduce exposure. Monitoring official Stargazer communications for updates is recommended.