CVE-2025-28907

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Rahul Arora WP Last Modified wp-last-modified allows Stored XSS.This issue affects WP Last Modified: from n/a through = 0.1...

CVE-2025-28907 WordPress WP Last Modified plugin <= 0.1 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Rahul Arora WP Last Modified wp-last-modified allows Stored XSS.This issue affects WP Last Modified: from n/a through = 0.1...

CVE-2025-28907

CVE-2025-28907 describes a stored XSS in the WordPress plugin WP Last Modified (versions up to 0.1, per the entry). The vulnerability stems from improper input neutralization during web page generation. Public documents in the initial data confirm the CVE and vulnerability class; connected source...