CVE-2025-25159
CVSS 3.1 Score 7.1 of 10 (high)
Details
Summary
CVE-2025-25159 is a Cross-site Scripting (XSS) vulnerability affecting WP Doodlez, a WordPress plugin. The flaw, classified as an Improper Neutralization of Input, permits attackers to inject malicious scripts into web pages generated by the plugin, exposing users to potential security risks. This issue spans WP Doodlez versions from n/a through 1.0.10. Successful exploitation could lead to unauthorized access, data theft, or other malicious activities. Users are advised to update their plugins to the latest version and practice safe browsing habits to mitigate potential threats.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.