CVE-2025-1509

Summary

CVE-2025-1509 is a vulnerability affecting The Show Me The Cookies plugin for WordPress. The issue allows unauthenticated attackers to execute arbitrary shortcodes due to the plugin's failure to properly validate user input before running the do_shortcode function. This vulnerability can be exploited to inject malicious content or take control of affected websites. Users are strongly urged to update to the latest version of the plugin or consider disabling it until a patch is available.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.