CVE-2025-32605

Summary

CVE-2025-32605 is a Cross-site Scripting (XSS) vulnerability affecting the MemberPress Discord Addon. The flaw, which allows Reflected XSS, occurs due to improper neutralization of user input during web page generation. This issue can be exploited to execute malicious scripts in a user's browser when they visit a specially crafted page. The vulnerability has been identified in all versions of the MemberPress Discord Addon from n/a through 1.1.1. Users are urged to update to the latest version or consider implementing additional security measures to mitigate the risk.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.