Stored Cross-Site Scripting in Print Button Shortcode Plugin for WordPress

CVE-2025-11810

What is CVE-2025-11810?

The Print Button Shortcode plugin for WordPress is affected by a Stored Cross-Site Scripting vulnerability due to inadequate input validation and output sanitization on the 'target' attribute of the 'print-button' shortcode. This flaw allows authenticated users with contributor access or higher to inject malicious scripts into web pages. These scripts execute when a user visits the compromised page, posing significant security risks to both site visitors and administrators.

References