PT-2025-26946 · WordPress · Modern Design Library

🗓️ 26 Jun 2025 00:00:00Reported by Positive TechnologiesType

ptsecurity

ptsecurity🔗 dbugs.ptsecurity.com

Stored Cross-Site Scripting in Modern Design Library plugin for WordPress versions up to 1.1.4

Reporter	Title	Published	Views	Family All 12
Circl	CVE-2025-5842	26 Jun 202509:50	–	circl
CNNVD	WordPress plugin Modern Design Library 跨站脚本漏洞	26 Jun 202500:00	–	cnnvd
CVE	CVE-2025-5842	26 Jun 202509:22	–	cve
Cvelist	CVE-2025-5842 Modern Design Library <= 1.1.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via class Parameter	26 Jun 202509:22	–	cvelist
EUVD	EUVD-2025-28690	3 Oct 202520:07	–	euvd
NVD	CVE-2025-5842	26 Jun 202510:15	–	nvd
OSV	CVE-2025-5842	26 Jun 202510:15	–	osv
Patchstack	WordPress Modern Design Library plugin <= 1.1.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via class Parameter vulnerability	26 Jun 202501:42	–	patchstack
RedhatCVE	CVE-2025-5842	28 Jun 202510:06	–	redhatcve
The Hacker News	⚡ Weekly Recap: Lazarus Hits Web3, Intel/AMD TEEs Cracked, Dark Web Leak Tool & More	3 Nov 202512:56	–	thn

Source	Link
nvd	www.nvd.nist.gov/vuln/detail/CVE-2025-5842
plugins	www.plugins.trac.wordpress.org/changeset/3317171
wordpress	www.wordpress.org/plugins/mdl-shortcodes/
t	www.t.me/cvenotify/126727
twitter	www.twitter.com/CVEnew/status/1938171332396454362
twitter	www.twitter.com/VulmonFeeds/status/1938187610582569421
t	www.t.me/cvetracker/27111
plugins	www.plugins.trac.wordpress.org/browser/mdl-shortcodes/trunk/mdl-shortcodes.php
wordfence	www.wordfence.com/threat-intel/vulnerabilities/id/1be519d5-b505-4b5d-9f14-c8544e8f8298

26 Jun 2025 00:00Current

6.1Medium risk

Vulners AI Score6.1

CVSS 3.15.4 - 6.4

EPSS0.00157

SSVC

stored cross-site scripting modern design library wordpress plugin vulnerability input sanitization