Medium · 6.5 CVE-2025-46501 EUVD-2025-12037GHSA-25qr-x7j7-m2cj

WordPress Mixcloud Embed plugin <= 2.2.0 - Cross Site Scripting (XSS) Vulnerability

Published Apr 24, 2025 · Updated Apr 28, 2026 · Assigned by Patchstack

Vendor: biancardi Product: Mixcloud Embed

Description

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in biancardi Mixcloud Embed mixcloud-embed allows Stored XSS.This issue affects Mixcloud Embed: from n/a through <= 2.2.0.

Affected products

Vendor	Product	Affected	Fixed
biancardi	Mixcloud Embed	≤ 2.2.0	—

References

https://patchstack.com/database/Wordpress/Plugin/mixcloud-embed/vulnerability/wordpress-mixcloud-embed-2-2-0-cross-site-scripting-xss-vulnerability?_s_id=cve vdb-entry