Cross-Site Scripting Vulnerability in Amuse Labs PuzzleMe for WordPress
CVE-2025-58621

6.5MEDIUM

Key Information:

Vendor

WordPress
Status
Puzzleme For WordPress
Vendor
CVE Published:
3 September 2025

What is CVE-2025-58621?

The Amuse Labs PuzzleMe plugin for WordPress contains a Cross-Site Scripting (XSS) vulnerability that allows attackers to inject malicious scripts. This flaw occurs due to improper neutralization of input during web page generation. As a result, malicious actors can craft payloads that, when viewed by users, execute unintended actions, potentially compromising the security of web applications and exposing users to various attacks. This vulnerability affects versions from n/a up to 1.2.0, and it is crucial for users to update and secure their installations.

Affected Version(s)

PuzzleMe for WordPress <= 1.2.0

References

https://patchstack.com/database/wordpress/plugin/puzzleme...
vdb-entry

CVSS V3.1

Score:
6.5
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
Required
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Muhammad Yudha - DJ (Patchstack Alliance)
.