CVE-2025-46533
CVSS 3.1 Score 5.9 of 10 (medium)
Details
Published Apr 24, 2025
Updated: Apr 29, 2025
CWE ID 79
Summary
CVE-2025-46533 is a Cross-Site Scripting (XSS) vulnerability affecting the Landing pages and Domain aliases feature of WordPress version 0.8 and below. Attackers can inject malicious scripts into web pages generated by wpdrift.no, which can be stored and executed in users' browsers when they view the affected pages. This can lead to unauthorized access to sensitive information or the theft of user data. Users are strongly advised to update their WordPress installation to the latest version to mitigate this risk.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.