Medium · 6.5 CVE-2025-50048 EUVD-2025-19017GHSA-w46v-v632-jr2p

WordPress Automatically Hierarchic Categories in Menu plugin <= 2.0.9 - Cross Site Scripting (XSS) Vulnerability

Published Jun 20, 2025 · Updated Apr 28, 2026 · Assigned by Patchstack

Vendor: Atakan Au Product: Automatically Hierarchic Categories in Menu

Description

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Atakan Au Automatically Hierarchic Categories in Menu automatically-hierarchic-categories-in-menu allows Stored XSS.This issue affects Automatically Hierarchic Categories in Menu: from n/a through <= 2.0.9.

Affected products

Vendor	Product	Affected	Fixed
Atakan Au	Automatically Hierarchic Categories in Menu	≤ 2.0.9	—

References

https://patchstack.com/database/Wordpress/Plugin/automatically-hierarchic-categories-in-menu/vulnerability/wordpress-automatically-hierarchic-categories-in-menu-plugin-2-0-9-cross-site-scripting-xss-vulnerability?_s_id=cve vdb-entry