CVE-2025-23582

CVE-2025-23582 describes a reflected cross-site scripting (XSS) vulnerability in the WordPress plugin Bulk Categories Assign (version up to 1.0). Public records assign a CVSS v3.1 base score of 7.1 (HIGH) with an impact on confidentiality, integrity, and availability (C/L/I/L) and an attacker‑con...