CVE-2025-1401

The WP Click Info WordPress plugin, in versions 2.7.4 and earlier , is vulnerable to a Reflected Cross-Site Scripting (XSS) flaw. This issue arises because the plugin fails to properly sanitise and escape a parameter before reflecting it back onto the page. An attacker could exploit this to targe...