Cross-site Scripting Vulnerability in StellarWP WPComplete Plugin

CVE-2025-50046

What is CVE-2025-50046?

The StellarWP WPComplete plugin is vulnerable to a Cross-site Scripting (XSS) issue due to improper input neutralization during web page generation. This vulnerability allows attackers to inject malicious scripts that can be executed in the context of the user’s browser, potentially leading to session hijacking or data theft. The affected versions are from n/a through 2.9.5. Webmasters and site administrators are advised to promptly apply security patches and follow best practices for securing their WordPress installations to mitigate the risks associated with this vulnerability.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch →

References