CVE-2026-25373

ProgressionStudios Vayvo vayvo-progression theme (WordPress) versions prior to 6.8 are affected by a Reflected Cross-Site Scripting (XSS) vulnerability due to improper neutralization of input during web page generation. The CVE-2026-25373 entry notes that an attacker can induce script execution i...

CVE-2026-25373 WordPress Vayvo - Media Streaming & Membership WordPress Theme theme < 6.8 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in ProgressionStudios Vayvo vayvo-progression allows Reflected XSS.This issue affects Vayvo: from n/a through 6.8...