CVE-2025-12964

creationtimestamp| type| source ---|---|--- 2025-11-21 11:33:59+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m656sbt52s2n...

CVE-2025-12964

The Magical Products Display plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'mpdprtitletag' and 'mpdprsubtitletag' parameters in the MPD Pricing Table widget in all versions up to, and including, 1.1.29 due to insufficient input sanitization and output escaping on...