Cross-site Scripting Vulnerability in Verowa Connect by Picture-Planet GmbH
CVE-2025-32609

7.1HIGH

Key Information:

Vendor

Picture-planet Gmbh

Status
Verowa Connect
Vendor
CVE Published:
17 April 2025

What is CVE-2025-32609?

The Verowa Connect plugin by Picture-Planet GmbH is susceptible to a Cross-site Scripting (XSS) vulnerability. This weakness can be exploited to execute arbitrary JavaScript code in the context of a user's browser. Malicious actors can leverage this loophole to execute harmful scripts, potentially compromising user data and session information. The vulnerability impacts all versions up to and including 3.0.4, prompting users to update to secure their systems against such attacks.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch

Affected Version(s)

Verowa Connect <= 3.0.4

References

https://patchstack.com/database/wordpress/plugin/verowa-c...
vdb-entry

CVSS V3.1

Score:
7.1
Severity:
HIGH
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

0xd4rk5id3 (Patchstack Alliance)
JSON
.