Skip to content
OpenAdvisories
Medium · 6.5 CVE-2025-58703 EUVD-2025-30485GHSA-q3j3-9x67-wqjx

WordPress Skyword API Plugin Plugin <= 2.5.3 - Cross Site Scripting (XSS) Vulnerability

Published Sep 22, 2025 · Updated Apr 28, 2026 · Assigned by Patchstack

Description

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in skyword Skyword API Plugin skyword-plugin allows Stored XSS.This issue affects Skyword API Plugin: from n/a through <= 2.5.3.

Affected products

VendorProductAffectedFixed
skyword Skyword API Plugin ≤ 2.5.3 —

References