Cross-Site Scripting Vulnerability in Abbie Expander by Ryan Burnette

CVE-2025-49427

What is CVE-2025-49427?

The Abbie Expander plugin developed by Ryan Burnette is susceptible to a vulnerability that allows for stored Cross-Site Scripting (XSS). This occurs through improper neutralization of input during web page generation, enabling attackers to inject malicious scripts that can be executed in the browser of unsuspecting users visiting the compromised site. The issue affects the plugin in versions from n/a up to and including 1.0.1, making it crucial for website administrators to address this flaw to ensure the security of their WordPress installations.

References