Cross-site Scripting Vulnerability in WP Discord Invite by Sarvesh M Rao

CVE-2025-47638

What is CVE-2025-47638?

A Stored Cross-site Scripting (XSS) vulnerability exists in the WP Discord Invite plugin developed by Sarvesh M Rao, affecting versions up to 2.5.3. This security flaw allows an attacker to inject malicious scripts that can be executed in the context of users' sessions, compromising their data and account security. As such, it is vital for users of this plugin to update to the latest version to mitigate the risk posed by this vulnerability.

References