Stored Cross-Site Scripting Vulnerability in Betheme Plugin for WordPress

CVE-2025-0450

What is CVE-2025-0450?

The Betheme plugin for WordPress is susceptible to a Stored Cross-Site Scripting vulnerability due to inadequate input sanitization and output escaping on user-defined attributes. Authenticated attackers with contributor-level access or higher can exploit this flaw to inject malicious scripts into web pages. These scripts will execute when users access the affected pages, posing a significant risk to site integrity and user safety.

References