CVE-2025-30899
CVSS 3.1 Score 5.9 of 10 (medium)
Details
Published Mar 27, 2025
CWE ID 79
Summary
CVE-2025-30899 is a Cross-site Scripting (XSS) vulnerability affecting the wpeverest User Registration plugin. The issue allows an attacker to inject malicious scripts into a webpage, potentially stealing user data or taking control of user sessions when users view a specially crafted link. This vulnerability exists in versions 4.0.3 and below, making it crucial for users to apply the necessary patches to mitigate the risk.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Affected Products
- User Registration Plugin
Affected Vendors
- WordPress