Skip to content
OpenAdvisories
Medium · 5.9 CVE-2025-58669 EUVD-2025-30520GHSA-v7q6-24v9-wc5f

WordPress Magento 2 WordPress Integration plugin <= 1.4.2.1 - Cross Site Scripting (XSS) vulnerability

Published Sep 22, 2025 · Updated Apr 28, 2026 · Assigned by Patchstack

Description

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Modern Minds Magento 2 WordPress Integration m2wp allows Stored XSS.This issue affects Magento 2 WordPress Integration: from n/a through <= 1.4.2.1.

Affected products

VendorProductAffectedFixed
Modern Minds Magento 2 WordPress Integration ≤ 1.4.2.1 —

References