Cross-Site Scripting Vulnerability in Themepoints Logo Showcase Plugin

CVE-2025-58684

What is CVE-2025-58684?

The Themepoints Logo Showcase plugin is vulnerable to a Cross-Site Scripting (XSS) attack due to improper input sanitization during web page generation. This flaw allows attackers to inject malicious scripts, potentially leading to data breaches, unauthorized actions, or the dissemination of harmful content across affected sites. This vulnerability impacts all versions of the plugin up to and including 3.0.9, making it essential for users to address the issue promptly to secure their WordPress installations.

References