Cross-Site Scripting Vulnerability in WPCRM Plugin by Mojo Joomla

CVE-2025-24774

What is CVE-2025-24774?

The WPCRM plugin for WordPress, which facilitates integration with Contact Form 7 and WooCommerce, is susceptible to a Cross-Site Scripting (XSS) vulnerability. This issue arises from insufficient input sanitization during web page generation, allowing attackers to potentially inject malicious scripts into the web pages. If successful, this could lead to the execution of arbitrary scripts in the context of the user's session. The vulnerability impacts all versions of the plugin up to and including version 3.2.0, making it critical for users to apply updates and implement security measures.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch →

References