CVE-2025-13862

creationtimestamp| type| source ---|---|--- 2026-01-09 13:05:08+00:00| seen| Telegram/Dh9HLp80PshBFHqXc6totOihOvBfjAyAmtgDAPhTaGebfs 2026-01-09 13:26:11+00:00| seen| https://gist.github.com/Darkcrai86/9e3565f6f7896d9f4f901fcf789aceb3 2026-01-09 15:15:31+00:00| seen|...

CVE-2025-13862 Menu Card <= 0.8.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode Attributes

The Menu Card plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the category parameter in all versions up to, and including, 0.8.0 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level access and...