Cross-site Scripting Vulnerability in User Extra Fields Plugin by Vanquish

CVE-2025-67991

What is CVE-2025-67991?

The Vanquish User Extra Fields plugin for WordPress is susceptible to a Cross-site Scripting (XSS) vulnerability that arises from improper handling of user inputs during web page generation. This flaw allows attackers to inject malicious scripts into pages viewed by other users, potentially compromising sensitive data and user sessions. The vulnerability affects versions prior to 16.8, making it crucial for users to update their plugins to mitigate risks associated with reflected XSS attacks.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch →

References