Skip to content
OpenAdvisories
High · 7.1 CVE-2025-25108 EUVD-2025-5652GHSA-v58q-54f6-f82p

WordPress SW Plus Plugin <= 2.1 - Reflected Cross Site Scripting (XSS) vulnerability

Published Mar 3, 2025 · Updated Apr 28, 2026 · Assigned by Patchstack

Description

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in shalomworld SW Plus shalom-world-media-gallery allows Reflected XSS.This issue affects SW Plus: from n/a through <= 2.1.

Affected products

VendorProductAffectedFixed
shalomworld SW Plus ≤ 2.1 —

References