CVE-2025-23586

Summary

CVE-2025-23586 is a Cross-site Scripting (XSS) vulnerability affecting WP Post Category Notifications. The issue, which allows Reflected XSS, is caused by improper neutralization of user input during web page generation in this plugin. Hackers can exploit this vulnerability to inject malicious scripts into web pages viewed by other users, potentially stealing sensitive information or gaining unauthorized access. This vulnerability affects WP Post Category Notifications versions from n/a through 1.0. To mitigate the risk, users are advised to upgrade to the latest version of the plugin or consider disabling it until a patch is available.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.