CVE-2025-11897

The The7 — Website and eCommerce Builder for WordPress theme for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘ the7fancytitlecss’ parameter in all versions up to, and including, 12.9.1 due to insufficient input sanitization and output escaping. This makes it possible for...

WordPress plugin The7 has a security vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to set up personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A security...

CVE-2025-11897

CVE-2025-11897 (The7 theme) The7 — Website and eCommerce Builder for WordPress theme is affected by a Stored Cross-Site Scripting (XSS) vulnerability in the the7_fancy_title_css parameter for all versions up to and including 12.9.1. Exploitation requires authenticated access at Contributor level ...

CVE-2025-11897: Improper Neutralization of Input During Web Page Generation

The The7 — Website and eCommerce Builder for WordPress theme for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘ the7fancytitlecss’ parameter in all versions up to, and including, 12.9.1 due to insufficient input sanitization and output escaping. This makes it possible for...