CVE-2025-14735

The "Amazon affiliate lite Plugin" plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in all versions up to, and including, 1.0.0 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with...

CVE-2025-14735

creationtimestamp| type| source ---|---|--- 2025-12-20 08:09:11+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mafqurd2lp2c 2025-12-20 10:57:56+00:00| seen| https://gist.github.com/Darkcrai86/77d859b01cd1f434b7837fb682ab9451...