Skip to content
OpenAdvisories
High · 7.1 CVE-2025-53237 EUVD-2025-207576GHSA-9mr9-pcmg-4xr7

WordPress WP Wizard Cloak Plugin <= 1.0.1 - Cross Site Scripting (XSS) Vulnerability

Published Feb 20, 2026 · Updated Apr 28, 2026 · Assigned by Patchstack

Description

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Soflyy WP Wizard Cloak wp-wizard-cloak allows Reflected XSS.This issue affects WP Wizard Cloak: from n/a through <= 1.0.1.

Affected products

VendorProductAffectedFixed
Soflyy WP Wizard Cloak ≤ 1.0.1 —

References