DOM-Based Stored Cross-Site Scripting in TablePress Plugin from WordPress

CVE-2025-5096

What is CVE-2025-5096?

The TablePress plugin for WordPress is susceptible to DOM-Based Stored Cross-Site Scripting vulnerabilities. This arises from the insufficient sanitization of inputs and failure to escape outputs for various data attributes, including 'data-caption', 'data-s-content-padding', 'data-s-title', and 'data-footer'. Authenticated attackers with Contributor-level access or higher can exploit this issue to inject and execute arbitrary web scripts on pages, affecting all users who access the compromised content.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch →

References