CVE-2025-4168

creationtimestamp| type| source ---|---|--- 2025-05-03 03:26:54+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3loafeladuj42 2025-05-03 06:05:36+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3loaob3wc662p 2025-05-03...

CVE-2025-4168 Subpage List <= 1.3.3 - Authenticated (Contributor+) Stored Cross-Site Scripting

The Subpage List plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'subpages' shortcode in all versions up to, and including, 1.3.3 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated...

CVE-2025-4168 Subpage List <= 1.3.3 - Authenticated (Contributor+) Stored Cross-Site Scripting

The Subpage List plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'subpages' shortcode in all versions up to, and including, 1.3.3 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated...

WordPress Subpage List plugin <= 1.3.3 - Authenticated (Contributor+) Stored Cross-Site Scripting vulnerability

Authenticated Contributor+ Stored Cross-Site Scripting vulnerability discovered by muhammad yudha in WordPress Plugin Subpage List versions = 1.3.3...