Stored Cross-Site Scripting Vulnerability in Reuse Builder Plugin for WordPress

CVE-2025-11812

What is CVE-2025-11812?

The Reuse Builder plugin for WordPress is subject to a stored cross-site scripting vulnerability caused by inadequate input sanitization and output escaping in the 'reuse_builder_single_post_title' shortcode. Attackers with contributor-level access or higher can exploit this flaw to inject malicious scripts through the 'style' attribute. These scripts will execute whenever a user accesses a page that has been altered, potentially leading to unauthorized actions and data exposure.

References