CVE-2025-13857

The CVE concerns the WordPress plugin Yet Another WebClap for WordPress. Exploitation target is the webclap_button shortcode's text parameter, with the vulnerability stemming from insufficient input sanitization and output escaping. Affected versions are all up to and including 0.2. Impact: authe...