Cross-site Scripting Vulnerability in WP Extended The Ultimate WordPress Toolkit

CVE-2025-30796

What is CVE-2025-30796?

A Cross-site Scripting (XSS) vulnerability has been identified in the WP Extended The Ultimate WordPress Toolkit plugin. This flaw allows attackers to inject malicious scripts into web pages, affecting users who interact with the compromised site. Specifically, the vulnerability arises from improper neutralization of input during web page generation, leading to the potential for reflected XSS attacks. Users with versions 3.0.14 and earlier should prioritize updating to mitigate associated risks.

References