CVE-2025-3750

The CVE CVE-2025-3750 affects the WordPress plugin Network Posts Extended (versions up to and including 7.7.1). It describes a Stored Cross-Site Scripting (Stored XSS) via the post_height parameter caused by insufficient input sanitization and output escaping. Exploitation requires authentication...

CVE-2025-3750: Improper Neutralization of Input During Web Page Generation

The Network Posts Extended plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘postheight’ parameter in all versions up to, and including, 7.7.1 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with...

WordPress Plugin Network Posts Extended: Cross-Site Script Vulnerability

WordPress Network Posts Extended is a WordPress plugin that enhances post publishing and management on WordPress websites. A cross-site scripting vulnerability exists in WordPress Network Posts Extended. The vulnerability stems from insufficient input cleanup and escaping of the postheight...

PT-2025-22333 · WordPress · Network Posts Extended

Name of the Vulnerable Software and Affected Versions: The Network Posts Extended plugin for WordPress versions up to, and including, 7.7.1 Description: The issue is related to Stored Cross-Site Scripting due to insufficient input sanitization and output escaping. This allows authenticated...