medium5.9
CVE-2025-15363
The Get Use APIs WordPress plugin before 2.0.10 executes imported JSON, which could allow users with a role as low as contributor to perform Cross-Site Scripti…
Impact
The Get Use APIs WordPress plugin before 2.0.10 executes imported JSON, which could allow users with a role as low as contributor to perform Cross-Site Scripting attacks under certain server configurations.
Affected products
| Product | Affected versions |
|---|---|
| Get Use APIs WordPress Plugin | before 2.0.10 |
Versions were read from the advisory text. No structured product data has been published for this record yet.