Cross-site Scripting Vulnerability in WP Wizard Cloak by Soflyy

CVE-2025-53237

What is CVE-2025-53237?

The WP Wizard Cloak plugin created by Soflyy is susceptible to a reflected cross-site scripting (XSS) vulnerability. This flaw arises from improper neutralization of input during web page generation, allowing attackers to inject malicious scripts. Successful exploitation can lead to unauthorized access or manipulation of the affected webpage, jeopardizing user data and site integrity. Site administrators using WP Wizard Cloak version 1.0.1 or earlier should address this issue promptly to protect their websites.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch →

References