Cross-site Scripting Vulnerability in Last Updated Shortcode by Luke Mlsna

CVE-2025-58683

What is CVE-2025-58683?

A Cross-site Scripting (XSS) vulnerability has been identified in the Last Updated Shortcode plugin developed by Luke Mlsna. This vulnerability allows attackers to inject malicious scripts that can be executed in the context of the affected site, potentially leading to unauthorized actions or data exposure. The issue is present across various versions of the plugin, making it critical for users to upgrade to secure versions and ensure their websites are not at risk. Users of the Last Updated Shortcode plugin should take immediate precautions to safeguard their applications.

References