Reflected Cross-Site Scripting in NotFound WordPress File Search Plugin

CVE-2025-23867

What is CVE-2025-23867?

A vulnerability exists in the NotFound WordPress File Search plugin that allows attackers to execute reflected cross-site scripting (XSS) attacks. This issue arises from improper input handling during web page generation, enabling malicious users to inject and execute arbitrary scripts in the context of users' browsers. Affected versions range from n/a to 1.2, making it essential for website administrators to ensure their plugins are updated and secure to protect against potential exploits. Regularly auditing and patching vulnerabilities is critical in maintaining web security.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch →

References