Skip to content
OpenAdvisories
Medium · 5.9 CVE-2025-32492 EUVD-2025-10618GHSA-c4x2-9r8f-8pxc

WordPress Admin Menu Post List plugin <= 2.0.7 - Cross Site Scripting (XSS) Vulnerability

Published Apr 9, 2025 · Updated Apr 28, 2026 · Assigned by Patchstack

Description

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Eliot Akira Admin Menu Post List admin-menu-post-list allows Stored XSS.This issue affects Admin Menu Post List: from n/a through <= 2.0.7.

Affected products

VendorProductAffectedFixed
Eliot Akira Admin Menu Post List ≤ 2.0.7 —

References