Search Results (1 CVEs found)

CVE Vendors Products Updated CVSS v3.1
CVE-2025-58625 2 Spiffyplugins, Wordpress 2 Wp Flow Plus, Wordpress 2026-04-23 5.9 Medium
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Spiffy Plugins WP Flow Plus wp-imageflow2 allows Stored XSS.This issue affects WP Flow Plus: from n/a through <= 5.2.5.