CVE-2025-2262
CVSS 3.1 Score 7.3 of 10 (high)
Details
Published Mar 18, 2025
CWE ID 862
Summary
CVE-2025-2262 is a vulnerability affecting the Logo Slider plugin for WordPress, versions up to 3.7.3. This issue allows unauthenticated attackers to execute arbitrary shortcodes due to insufficient input validation when running the do_shortcode function. Consequently, an attacker can inject and execute malicious code, leading to potential security risks and website compromise. WordPress users are strongly advised to update the Logo Slider plugin to the latest version to mitigate this vulnerability.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.