The vulnerability CVE-2025-69384 affects the wpdiscover Timeline Event History plugin (version <= 3.2). It is a reflected Cross-site Scripting (XSS) issue caused by improper neutralization of input during web page generation. The CVSS 3.1 score is 7.1, indicating high severity, with an attack vector of network, low attack complexity, no privileges required, user interaction required, and scope change. The impact includes low confidentiality, integrity, and availability losses. No patch or remediation details are currently available.

Successful exploitation of this reflected XSS vulnerability can allow an attacker to execute arbitrary scripts in the context of the victim's browser, potentially leading to theft of user data, session hijacking, or other malicious actions affecting confidentiality, integrity, and availability to a limited extent. However, no known exploits are currently reported in the wild.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is available, users should exercise caution with untrusted input and consider disabling or restricting use of the affected plugin version. Monitor official wpdiscover communications for updates on patches or mitigations.