Stored Cross-Site Scripting in CryptX Plugin for WordPress

CVE-2025-13739

What is CVE-2025-13739?

The CryptX plugin for WordPress is susceptible to Stored Cross-Site Scripting (XSS) through its cryptx shortcode due to inadequate input sanitization and output escaping on attributes provided by users. This vulnerability allows authenticated attackers with contributor-level access or higher to inject malicious web scripts into pages. When other users visit an affected page, the scripts execute, potentially compromising user data and site integrity. Users are advised to update to the latest version of the plugin to mitigate this risk.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch →

References