CVE-2025-27323
CVSS 3.1 Score 6.5 of 10 (medium)
Details
Published Feb 24, 2025
CWE ID 79
Summary
CVE-2025-27323 is a Cross-Site Scripting (XSS) vulnerability affecting WP About Author, a WordPress plugin. The flaw, named DOM-Based XSS, occurs during the generation of web pages in the plugin. An attacker could exploit this vulnerability to inject malicious scripts into a website, potentially gaining unauthorized access to user data or taking control of user sessions. Websites using WP About Author versions 1.5 and below are at risk. Users are urged to update to the latest version or consider disabling the plugin as a temporary solution.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.