Stored Cross-Site Scripting Vulnerability in Simple Responsive Slider Plugin for WordPress

CVE-2025-8690

What is CVE-2025-8690?

The Simple Responsive Slider plugin for WordPress is affected by a Stored Cross-Site Scripting vulnerability due to inadequate input validation and output escaping. This flaw allows authenticated users with Contributor-level access and higher to inject malicious web scripts into pages, which will execute when other users visit those pages. It poses a significant risk as it can compromise user sessions and lead to unauthorized actions on the website.

References