CVE-2025-15363

The Get Use APIs WordPress plugin before 2.0.10 executes imported JSON, which could allow users with a role as low as contributor to perform Cross-Site Scripting attacks under certain server configurations...

CVE-2025-15363

The Get Use APIs WordPress plugin before 2.0.10 executes imported JSON, which could allow users with a role as low as contributor to perform Cross-Site Scripting attacks under certain server configurations...

CVE-2025-15363

The Get Use APIs WordPress plugin (also identified as JSON Content Importer ) is vulnerable to Stored Cross-Site Scripting (XSS) in versions prior to 2.0.10 . The root cause is the execution of imported JSON data without proper neutralization, which could allow users with a role as low as contrib...