WordPress Auction Nudge cross-site scripting vulnerability

WordPress Auction Nudge versions 8.4.0 and earlier contain a cross-site scripting vulnerability, which stems from unauthenticated cross-site scripting attacks...

CVE-2025-24658

CVE-2025-24658 affects the WordPress plugin Auction Nudge – Your eBay on Your Site (versions n/a–7.2.0). The vulnerability is a Stored XSS caused by improper input neutralization during web page generation. CVSS 3.1 base score 5.9 (MEDIUM); attack vector Network, user interaction required, with H...