CVE-2025-13747

CVE-2025-13747 : The NewStatPress WordPress plugin is vulnerable to Stored Cross-Site Scripting via a regex bypass in the nsp_shortcode function in all versions up to 1.4.3. Exploitation requires authentication at contributor level or higher and can inject scripts executed by users on injected pa...

WordPress NewStatPress plugin <= 1.4.3 - Authenticated (Contributor+) Stored Cross-Site Scripting vulnerability

Authenticated Contributor+ Stored Cross-Site Scripting vulnerability discovered by Muhammad Yudha - DJ in WordPress Plugin NewStatPress versions = 1.4.3...