CVE-2025-53582

CVE-2025-53582 is a stored XSS vulnerability in WordLift WordLift (WordLift plugin) affecting versions up to 3.54.5. The issue arises from improper neutralization of input during web page generation. Reports from Patchstack/Wordfence/CVEs indicate a patch version beyond 3.54.5 is available, and W...

CVE-2025-53582 WordPress WordLift Plugin <= 3.54.5 - Cross Site Scripting (XSS) Vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in WordLift WordLift wordlift allows Stored XSS.This issue affects WordLift: from n/a through = 3.54.5...

PT-2025-33378 · WordPress · Wordlift

Name of the Vulnerable Software and Affected Versions: WordLift versions through 3.54.5 Description: WordLift is susceptible to a cross-site scripting XSS issue that allows for stored XSS attacks. This occurs due to improper neutralization of input during web page generation. Recommendations:...