CVE-2025-14632

creationtimestamp| type| source ---|---|--- 2026-01-17 03:51:51+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mclpkg7rl625...

CVE-2025-14632

CVE-2025-14632 refers to the WordPress plugin Filr – Secure document library (versions up to and including 1.2.11). It is vulnerable to Stored Cross-Site Scripting (Stored XSS) via unload restrictions in the file upload flow, caused by the unrestricted HTML upload path in the FILR_Uploader class....