Skip to content
OpenAdvisories
High · 7.1 CVE-2025-53228 EUVD-2025-207571GHSA-g3qj-5j85-8w2c

WordPress bbpress Simple Advert Units Plugin <= 0.41 - Cross Site Scripting (XSS) Vulnerability

Published Feb 20, 2026 · Updated Apr 28, 2026 · Assigned by Patchstack

Description

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in jezza101 bbpress Simple Advert Units bbpress-simple-advert-units allows Reflected XSS.This issue affects bbpress Simple Advert Units: from n/a through <= 0.41.

Affected products

VendorProductAffectedFixed
jezza101 bbpress Simple Advert Units ≤ 0.41 —

References