WordPress PullQuote plugin <= 1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode Attributes vulnerability

Authenticated Contributor+ Stored Cross-Site Scripting via Shortcode Attributes vulnerability discovered by Gilang - DJ in WordPress Plugin PullQuote versions = 1.0...

CVE-2025-13903

creationtimestamp| type| source ---|---|--- 2026-01-09 13:05:34+00:00| seen| Telegram/AGJsClzs7lPfqLOjvN9BoXsrmzIKG2pVKSyr843qoYc 2026-01-09 13:30:27+00:00| seen| https://gist.github.com/Darkcrai86/ded528d0367e4fd490778129d0de5a5a 2026-01-09 15:10:45+00:00| seen|...