CVE-2025-22733
CVSS 3.1 Score 7.1 of 10 (high)
Details
Published Jan 21, 2025
CWE ID 79
Summary
CVE-2025-22733 is a Cross-site Scripting (XSS) vulnerability affecting the WPHocus My auctions plugin for WordPress. The flaw, named Reflected XSS, occurs during web page generation in versions from n/a to 3.6.18. An attacker can exploit this vulnerability by injecting malicious scripts into a webpage, potentially stealing sensitive user data or gaining unauthorized access to user sessions. The vulnerability poses a serious security risk to websites using the affected plugin and requires immediate patching.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Affected Products
- My Auctions Allegro Plugin
Affected Vendors
- WordPress