Vulnerability Bulletins

CVE-2025-6382

   
Affected software WORDPRESS
 
The Taeggie Feed plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's taeggie-feed shortcode in all versions up to, and including, 0.1.10. The plugin’s render() method takes the user-supplied name attribute and injects it directly into a

Link:

https://nvd.nist.gov/vuln/detail/CVE-2025-6382