Reflected XSS Vulnerability in Bulk Page Stub Creator by WordPress
CVE-2025-39519

7.1HIGH

Key Information:

Vendor

WordPress
Status
Bulk Page Stub Creator
Vendor
CVE Published:
17 April 2025

What is CVE-2025-39519?

The Bulk Page Stub Creator by WordPress is susceptible to a reflected Cross-site Scripting (XSS) vulnerability. This flaw occurs due to improper neutralization of user inputs during web page generation, allowing attackers to execute arbitrary scripts in the context of the user’s browser session. Consequently, this can lead to unauthorized access to user data or further exploitation of the website. Affected versions include all prior to 1.1.

Affected Version(s)

Bulk Page Stub Creator <= 1.1

References

https://patchstack.com/database/wordpress/plugin/bulk-pag...
vdb-entry

CVSS V3.1

Score:
7.1
Severity:
HIGH
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Nguyen Xuan Chien (Patchstack Alliance)
.