WordPress Stylish Order Form Builder plugin <= 1.0 - Authenticated (Subscriber+) Stored Cross-Site Scripting via 'product_name' Parameter vulnerability

Authenticated Subscriber+ Stored Cross-Site Scripting via 'productname' Parameter vulnerability discovered by Sopon Tangpathum SoNaJaa - freelance in WordPress Plugin Stylish Order Form Builder versions = 1.0...

CVE-2025-13531

creationtimestamp| type| source ---|---|--- 2026-01-07 09:55:07+00:00| seen| https://gist.github.com/Darkcrai86/9adc21802d167033c622550a8dfb480d...