CVE-2025-11265

CVE-2025-11265 concerns the VK All in One Expansion Unit plugin for WordPress. The issue is a Stored Cross-Site Scripting vulnerability in versions up to and including 9.112.1, caused by a logic error in the CTA save function that reads sanitization callbacks from the wrong variable, allowing aut...