CVE-2025-25133

Summary

CVE-2025-25133 is a Cross-site Scripting (XSS) vulnerability affecting WP Frontend Submit, an plugin used for handling frontend submissions in WordPress websites. The issue stems from improper neutralization of user input during web page generation, enabling attackers to inject malicious scripts into a targeted website. Successful exploitation of this vulnerability could result in data theft, unauthorized access, or even complete site takeover. The affected version range is from n/a to 1.1.0. It is recommended that users update to the latest version of WP Frontend Submit to mitigate this risk.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.