Cross-site Scripting Vulnerability in Author Bio Shortcode by Plugin Developer

CVE-2025-31731

What is CVE-2025-31731?

The Author Bio Shortcode plugin for WordPress contains a Cross-site Scripting (XSS) vulnerability that allows an attacker to inject malicious scripts through improperly sanitized input during web page generation. This flaw enables stored XSS attacks, where injected scripts are saved and executed on the browsers of visitors viewing potentially compromised pages. Affected versions include all releases up to 2.5.3, posing a significant security risk to sites utilizing this plugin.

References