WordPress Review Disclaimer plugin <= 2.0.3 - Cross Site Scripting (XSS) vulnerability
CVE-2025-67628

Currently unrated

Key Information:

Vendor: WordPress
Status: Review Disclaimer
Vendor: CVE Published:; 24 December 2025

What is CVE-2025-67628?

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in AMP-MODE Review Disclaimer review-disclaimer allows Stored XSS.This issue affects Review Disclaimer: from n/a through <= 2.0.3.

Affected Version(s)

Review Disclaimer <= n/a

References

https://vdp.patchstack.com/database/Wordpress/Plugin/revi...

vdb-entry

Download the Critical Vulnerability Management Cheat Sheet

Timeline

Vulnerability published
Dec 24, 2025
Vulnerability Reserved
Dec 9, 2025

Credit

Muhammad Nur Ibnu Hubab | Patchstack Bug Bounty Program

JSON