CVE-2025-32193
CVSS 3.1 Score 6.5 of 10 (medium)
Details
Published Apr 4, 2025
Updated: Apr 7, 2025
CWE ID 79
Summary
CVE-2025-32193 is a Cross-site Scripting (XSS) vulnerability affecting WPMinds Simple WP Events from versions n/a through 1.8.17. An attacker can exploit this Improper Neutralization of Input vulnerability during web page generation to inject malicious scripts into a victim's browser. These scripts can potentially steal sensitive user data, perform unauthorized actions, and create security risks for the affected website and its visitors. Users are advised to update to the latest version of Simple WP Events to mitigate this threat.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.