CVE-2025-13854

creationtimestamp| type| source ---|---|--- 2026-01-09 13:05:08+00:00| seen| Telegram/Dh9HLp80PshBFHqXc6totOihOvBfjAyAmtgDAPhTaGebfs 2026-01-09 13:28:32+00:00| seen| https://gist.github.com/Darkcrai86/f14046afeb13f501ed917628655b12b1 2026-01-09 14:41:26+00:00| seen|...

CVE-2025-13854 Curved Text <= 0.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode Attributes

The Curved Text plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'radius' parameter of the arctext shortcode in all versions up to, and including, 0.1 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with...