Skip to content
OpenAdvisories
High · 7.1 CVE-2025-25133 EUVD-2025-5634GHSA-vc7v-xwv2-3v83

WordPress WP Frontend Submit Plugin <= 1.1.0 - Reflected Cross-Site Scripting vulnerability

Published Mar 3, 2025 · Updated Apr 28, 2026 · Assigned by Patchstack

Description

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in newbiesup WP Frontend Submit wp-frontend-submit allows Reflected XSS.This issue affects WP Frontend Submit: from n/a through <= 1.1.0.

Affected products

VendorProductAffectedFixed
newbiesup WP Frontend Submit ≤ 1.1.0 —

References