CVE-2025-9500

CVE-2025-9500 affects the WordPress TablePress plugin up to version 3.2. The root cause is a stored XSS via the shortcode_debug parameter caused by insufficient input sanitization and output escaping. Exploitation requires authenticated access at Contributor level or higher, and scripts execute w...