CVE-2025-30873

Summary

CVE-2025-30873 is a Cross-site Scripting (XSS) vulnerability affecting the Greenshift plugin for WordPress, from version n/a through 11.0.2. An attacker can exploit this Improper Neutralization of Input vulnerability to inject malicious scripts into web pages generated by Greenshift, potentially stealing user data or taking control of user sessions. Successful exploitation could lead to significant security risks for affected websites and their visitors. Users are advised to update to the latest version of Greenshift as soon as possible to mitigate this threat.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.