Skip to main content
Radar
DashboardThreatsMapFeedsAPI
reconnecting

CVE-2025-49437: CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in worstguy WP LOL Rotation

Medium
VulnerabilityCVE-2025-49437cvecve-2025-49437cwe-79
Published: Thu Aug 14 2025 (08/14/2025, 10:34:08 UTC)
Source: CVE Database V5
Vendor/Project: worstguy
Product: WP LOL Rotation

Description

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in worstguy WP LOL Rotation allows Stored XSS. This issue affects WP LOL Rotation: from n/a through 1.0.

Technical Details

Data Version
5.1
Assigner Short Name
Patchstack
Date Reserved
2025-06-04T15:44:46.228Z
Cvss Version
3.1
State
PUBLISHED

Threat ID: 689dbee3ad5a09ad0059e61d

Added to database: 8/14/2025, 10:48:03 AM

Last updated: 8/14/2025, 10:48:03 AM

Views: 1

Related Threats

CVE-2025-8957: SQL Injection in Campcodes Online Flight Booking Management System

Medium
VulnerabilityThu Aug 14 2025

CVE-2025-54707: CWE-89 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') in RealMag777 MDTF

Critical
VulnerabilityThu Aug 14 2025

CVE-2025-54706: CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in Noor Alam Magical Posts Display

Medium
VulnerabilityThu Aug 14 2025

CVE-2025-54705: CWE-862 Missing Authorization in magepeopleteam WpEvently

Medium
VulnerabilityThu Aug 14 2025

CVE-2025-54704: CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in hashthemes Easy Elementor Addons

Medium
VulnerabilityThu Aug 14 2025

Actions

Please log in to the Console to use AI analysis features.

Need enhanced features?

Contact root@offseq.com for Pro access with improved analysis and higher rate limits.

Latest Threats