CVE-2025-31446

Summary

CVE-2025-31446 is a Cross-site Scripting (XSS) vulnerability affecting WP Cleaner, a plugin used in WordPress websites. The issue arises from improper neutralization of user inputs during web page generation. An attacker can exploit this vulnerability by injecting malicious scripts into specifically crafted web pages, potentially gaining control over the user's browser or stealing sensitive information. WP Cleaner versions from n/a to 1.1.5 are known to be vulnerable. Users are advised to update to the latest version or consider alternative solutions to mitigate the risk of XSS attacks.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.