Vulnerability Bulletins

CVE-2025-9512

   
Affected software WORDPRESS
 
The Schema & Structured Data for WP & AMP WordPress plugin before 1.50 does not properly handles HTML tag attribute modifications, making it possible for unauthenticated attackers to conduct Stored XSS attacks via post comments.

Link:

https://nvd.nist.gov/vuln/detail/CVE-2025-9512