CVE-2025-8780

creationtimestamp| type| source ---|---|--- 2025-12-13 12:21:06+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m7ulorzi7v2x 2025-12-15 08:52:00+00:00| seen| https://gist.github.com/Darkcrai86/6c6ee8d222d987b619536ac852808501...

WordPress Livemesh SiteOrigin Widgets plugin <= 3.9.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Hero Header and Pricing Table Widgets vulnerability

Authenticated Contributor+ Stored Cross-Site Scripting via Hero Header and Pricing Table Widgets vulnerability discovered by zer0gh0st in WordPress Plugin Livemesh SiteOrigin Widgets versions = 3.9.1...