CVE-2025-23726
CVSS 3.1 Score 7.1 of 10 (high)
Details
Published Mar 3, 2025
CWE ID 79
Summary
CVE-2025-23726 is a Cross-site Scripting (XSS) vulnerability affecting NotFound ComparePress, a plugin used in WordPress websites. The flaw, specifically an Improper Neutralization of Input During Web Page Generation issue, enables attackers to inject malicious code into web pages generated by the plugin, putting users at risk of data theft and unauthorized actions. This vulnerability has impacted NotFound ComparePress versions from n/a to 2.0.8. Website administrators must update the plugin to the latest version to mitigate this risk.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.