EUVD-2025-60946

🗓️ 11 Nov 2025 06:30:22Reported by EUVDType

Stored XSS in WordPress Share to Google Classroom plugin up to version 1.0 enables attackers with Contributor access to inject scripts.

Reporter	Title	Published	Views	Family All 10
Circl	CVE-2025-12711	11 Nov 202506:19	–	circl
CNNVD	WordPress plugin Share to Google Classroom 跨站脚本漏洞	11 Nov 202500:00	–	cnnvd
CVE	CVE-2025-12711	11 Nov 202503:30	–	cve
Cvelist	CVE-2025-12711 Share to Google Classroom <= 1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via share_to_google Shortcode	11 Nov 202503:30	–	cvelist
NVD	CVE-2025-12711	11 Nov 202504:15	–	nvd
Patchstack	WordPress Share to Google Classroom plugin <= 1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via share_to_google Shortcode vulnerability	10 Nov 202523:27	–	patchstack
Positive Technologies	PT-2025-46294	11 Nov 202500:00	–	ptsecurity
RedhatCVE	CVE-2025-12711	12 Nov 202503:47	–	redhatcve
Vulnrichment	CVE-2025-12711 Share to Google Classroom <= 1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via share_to_google Shortcode	11 Nov 202503:30	–	vulnrichment
Wordfence Blog	Wordfence Intelligence Weekly WordPress Vulnerability Report (November 10, 2025 to November 16, 2025)	20 Nov 202516:10	–	wordfence

[
  {
    "enisaIdVendor": [
      {
        "id": "7434d49f-65f1-3299-8fca-50d20c2d045c",
        "vendor": {
          "name": "pritenhshah"
        }
      }
    ],
    "enisaIdProduct": [
      {
        "id": "59953bb1-be15-3f56-aa18-658e8d45ecc6",
        "product": {
          "name": "Share to Google Classroom"
        },
        "product_version": "* ≤1.0"
      }
    ]
  }
]

Source	Link
wordfence	www.wordfence.com/threat-intel/vulnerabilities/id/87cc821c-21d5-49b7-9b72-030ca016efd8
plugins	www.plugins.trac.wordpress.org/browser/share-to-google-classroom/tags/1.0/share_to_google_classroom.php
nvd	www.nvd.nist.gov/vuln/detail/CVE-2025-12711

11 Nov 2025 06:30Current

4.6Medium risk

Vulners AI Score4.6

CVSS 3.16.4

EPSS0.00032