Vulnerabilities

CVE Alert: CVE-2025-6382

An Ad-Free Experience: No more interruptions like this.
Exclusive Perks: Access to special content.
Direct Support: Help us grow and improve by supporting our work directly.

July 26, 2025

Vulnerability Summary: CVE-2025-6382

The Taeggie Feed plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin’s taeggie-feed shortcode in all versions up to, and including, 0.1.10. The plugin’s render() method takes the user-supplied name attribute and injects it directly into a