CVE-2025-0718
CVSS 3.1 Score 4.8 of 10 (medium)
Details
Published Mar 23, 2025
Updated: Apr 2, 2025
CWE ID 79
Summary
CVE-2025-0718 is a vulnerability affecting the Nested Pages WordPress plugin before version 3.2.13. This issue arises from the plugin's failure to sanitize and escape certain settings. As a result, high privilege users, including contributors, can execute Stored Cross-Site Scripting attacks. In multisite setups, the unfiltered_html capability is often disallowed, but this vulnerability can bypass that restriction.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.