WordPress Themify Icons Plugin <= 2.0.3 - Cross Site Scripting (XSS) Vulnerability

Cross Site Scripting XSS Vulnerability discovered by zaim in WordPress Plugin Themify Icons versions = 2.0.3...

CVE-2025-49395

creationtimestamp| type| source ---|---|--- 2025-08-20 08:11:00+00:00| seen| Telegram/9q38hy1ZUdwrbo-8FBsct9nUTc8xjeAfzOZA9x2hAOm4rMs...

CVE-2025-49395

CVE-2025-49395 affects Themify Icons plugin for WordPress (versions up to 2.0.3). The issue is a Stored Cross-Site Scripting (XSS) caused by improper neutralization of user-supplied input during web page generation. Exploitation could allow an attacker to inject and execute script in an admin/use...