Stored Cross-Site Scripting in Photos and Social Share Buttons Plugin for WordPress

CVE-2025-1513

What is CVE-2025-1513?

The Photos, Files, YouTube, Twitter, Instagram, TikTok, Ecommerce Contest Gallery plugin for WordPress is prone to a Stored Cross-Site Scripting vulnerability. This security flaw arises from inadequate input sanitization and output escaping in the Name and Comment fields during photo gallery comments. Attackers can exploit this vulnerability to inject malicious web scripts. Once an affected page is accessed by a user, the injected scripts could execute, leading to potential data breaches and compromised user security.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch →

References