Reflected Cross-Site Scripting Vulnerability in Twitscription Plugin for WordPress

CVE-2025-13623

What is CVE-2025-13623?

The Twitscription plugin for WordPress is susceptible to Reflected Cross-Site Scripting (XSS) vulnerabilities due to inadequate input sanitization and output escaping in the admin.php PATH_INFO. This flaw permits unauthenticated attackers to inject arbitrary web scripts, which can be executed if a user inadvertently interacts with a malicious link. Users and administrators should take immediate action to mitigate the risk associated with this vulnerability to protect their WordPress sites effectively.

References