CVE-2025-27006

CVE-2025-27006 concerns the WordPress plugin Authorsy (themeplugs Authorsy). The issue is a Stored XSS caused by improper neutralization of input during web page generation, affecting Authorsy versions up to 1.0.5. The CVSS 3.1 base score is 6.5 (Medium) with network attack vector, low attack com...

WordPress Authorsy Plugin <= 1.0.5 - Cross Site Scripting (XSS) Vulnerability

Cross Site Scripting XSS Vulnerability discovered by Denver Jackson Patchstack Alliance in WordPress Plugin Authorsy versions = 1.0.5...