Skip to content
OpenAdvisories

Vendor

mmdeveloper

2 known vulnerabilities.

Products

A Forms Plugin 1 Preload Current Images 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 6.4
    CVE-2025-12658

    Preload Current Images <= 1.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode

    The Preload Current Images plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'complete' parameter in the 'preload_progress_bar' shortcode in all versions up to, and including, 1.3. This is due to insufficient input sanitization and out…

    mmdeveloper Preload Current Images Web / CMS