Skip to content
OpenAdvisories
Medium · 6.5 CVE-2025-46540 EUVD-2025-11991GHSA-x3w7-4p8h-46r7

WordPress GNA Search Shortcode plugin <= 0.9.5 - Cross Site Scripting (XSS) Vulnerability

Published Apr 24, 2025 · Updated May 12, 2026 · Assigned by Patchstack

Description

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Chris Mok GNA Search Shortcode gna-search-shortcode allows Stored XSS.This issue affects GNA Search Shortcode: from n/a through <= 0.9.5.

Affected products

VendorProductAffectedFixed
Chris Mok GNA Search Shortcode ≤ 0.9.5 —

References