CVE-2025-8316

CVE-2025-8316 describes a Stored Cross-Site Scripting in Certifica WP (WordPress) up to version 3.1, exploitable by authenticated users with Contributor+ privileges via the evento parameter. The impact is arbitrary web-script execution when affected pages are viewed. The Wordfence summary lists t...