CVE-2025-1486

The WoWPth WordPress plugin is vulnerable to Reflected Cross-Site Scripting (XSS) in versions 2.0 and earlier . The root cause is a failure to properly sanitise and escape a parameter before it is outputted back onto the page. This vulnerability can be exploited against high-privilege users , suc...