CVE-2025-1033

The Badgearoo WordPress plugin (versions 1.0.14 and earlier) contains a Stored Cross-Site Scripting (XSS) vulnerability. The root cause is the failure to properly sanitise and escape certain plugin settings. This flaw allows high-privilege users, such as administrators, to perform XSS attacks, ev...