CVE-2025-39575

CVE-2025-39575 describes a stored XSS in the WordPress plugin WPCasa (WPCasa) up to version 1.3.2, arising from improper input neutralization during web page generation. Affected software is WPCasa

CVE-2024-53826 WordPress WPCasa plugin <= 1.2.13 - Insecure Direct Object References (IDOR) vulnerability

Missing Authorization vulnerability in WPSight WPCasa allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects WPCasa: from n/a through 1.2.13...