CVE-2025-46226

MEDIO 5.4CVE-2025-46226 · Published 22/04/2025 · updated 17/06/2026

In breve

CVE-2025-46226 è una vulnerabilità MEDIO (CVSS 5.4) che riguarda mpl-publisher (mpl-publisher).
Probabilità di sfruttamento nei prossimi 30 giorni (EPSS): 0.28%, superiore al 20.1% delle vulnerabilità.
Correzione: aggiornare a 2.18.1 o successiva.

Package	Affected versions	Patched versions
mpl-publisher mpl-publisher	`< 2.18.1`	`2.18.1`

Description

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in ferranfg MPL-Publisher mpl-publisher allows Stored XSS.This issue affects MPL-Publisher: from n/a through <= 2.18.0.

References

patchstack.com/database/Wordpress/Plugin/mpl-publisher/vulnerability/wordpress-mpl-publisher-2-18-0-cross-site-scripting-xss-vulnerability · Third Party Advisory

Altre vulnerabilità di mpl-publisher

Vedi tutto →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free