Threats Tagged 'cve-2025-10357'
View all threats tagged with 'cve-2025-10357'. Filter and sort to focus on specific types of threats.
Stop chasing alerts. Route them.
Start free, then upgrade once to turn Radar into an automated delivery engine for your security stack.
Custom feeds / Automations: email, Slack, webhooks, SIEM/MISP / API access (baseline limits)
API access activates after upgrading in Console -> Billing.
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.
Filter Threats
Narrow down the results by type, severity, or affected countries
Threats Tagged 'cve-2025-10357'
Click on any threat for detailed analysis and mitigation recommendations
CVE-2025-10357 is a medium-severity Cross-Site Scripting (XSS) vulnerability in the Simple SEO WordPress plugin versions before 2.0.32. It arises because the plugin fails to properly sanitize and escape certain parameters when rendering them on pages. This flaw allows users with as low a privilege as the contributor role to inject malicious scripts, potentially affecting other users who view the compromised content. The vulnerability requires user interaction and network access but no elevated privileges beyond contributor. Although no known exploits are currently reported in the wild, the vulnerability's scope includes all WordPress sites using affected versions of Simple SEO. European organizations using this plugin could face risks of session hijacking, defacement, or phishing attacks. Mitigation involves promptly updating the plugin to version 2.0. Join the discussion | CVE Database V5 | 10/14/2025, 06:00:05 UTC Added: 10/14/2025, 06:19:03 UTC |
Showing 1 to 1 of 1 result