CVE-2025-6039

CVE-2025-6039 affects the ProcessingJS for WordPress plugin. The vulnerability is a Stored Cross-Site Scripting (XSS) via the plugin’s pjs4wp shortcode in all versions up to and including 1.2.2. With authenticated access at contributor level or higher , an attacker can inject scripts that execute...