Cross-site Scripting Vulnerability in WP-ShowHide by Lester Chan

CVE-2025-67541

What is CVE-2025-67541?

The WP-ShowHide plugin by Lester Chan contains a vulnerability that allows for Stored Cross-site Scripting (XSS). This occurs due to improper handling of user input during web page generation. Attackers can exploit this issue to insert malicious scripts, which may be stored on the server and executed in the context of users accessing the affected site. Users of WP-ShowHide versions up to and including 1.05 are advised to update their installations to mitigate potential security threats.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch →

References