CVE-2025-22327

Summary

CVE-2025-22327 is a Cross-site Scripting (XSS) vulnerability affecting Olaf Lederer's EO4WP plugin. The flaw, identified as Stored XSS, is located in the plugin's web page generation process. An attacker can exploit this vulnerability by injecting malicious scripts into EO4WP, which could be stored and executed on affected websites, potentially leading to unauthorized access or data theft for unsuspecting users. This issue impacts versions of EO4WP from n/a through 1.0.7.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.