CVE-2025-58625

CVE-2025-58625 – WP Flow Plus stored XSS A cross-site scripting vulnerability exists in the WordPress plugin WP Flow Plus (Spiffy Plugins) affecting versions up to 5.2.5. The flaw stems from improper input neutralization during web page generation, enabling stored XSS. The CVSS v3.1 base score is...