CVE-2025-14393

CVE-2025-14393 affects the Wikp WordPress Basic Ajax Form plugin. It is a Stored XSS via the dname parameter in all versions up to 1.0, caused by insufficient input sanitization and output escaping. Exploitation requires authenticated access at Contributor level or higher , allowing an attacker t...