WordPress Directory Pro Plugin <= 2.5.5 - Cross Site Scripting (XSS) Vulnerability

Cross Site Scripting XSS Vulnerability discovered by João Pedro S Alcântara Kinorth in WordPress Plugin Directory Pro versions = 2.5.5...

CVE-2025-57948

CVE-2025-57948 affects Directory Pro (WordPress plugin). It is described as an Authenticated Stored Cross-Site Scripting vulnerability in Directory Pro versions up to 2.5.5, caused by improper neutralization of input during web page generation. The connected materials indicate patch status is Unp...