CVE-2025-67552

CVE-2025-67552 : DOM-based XSS in Walker Core (walker-core) due to improper input neutralization during web page generation. Affected version range:

WordPress plugin Walker Core 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A cross-site...

WordPress Walker Core plugin <= 1.3.17 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by Peter Thaleikis in WordPress Plugin Walker Core versions = 1.3.17...

WordPress Walker Core plugin < 1.1.8 - Toggle The Debug Mode via Cross-Site Request Forgery (CSRF) vulnerability

Toggle The Debug Mode via Cross-Site Request Forgery CSRF vulnerability discovered in WordPress Walker Core plugin versions 1.1.8. Solution Update the WordPress Walker Core plugin to the latest available version at least 1.1.8...