Threats Tagged 'cve-2025-15396'
View all threats tagged with 'cve-2025-15396'. Filter and sort to focus on specific types of threats.
Stop chasing alerts. Route them.
Start free, then upgrade once to turn Radar into an automated delivery engine for your security stack.
Custom feeds / Automations: email, Slack, webhooks, SIEM/MISP / API access (baseline limits)
API access activates after upgrading in Console -> Billing.
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.
Filter Threats
Narrow down the results by type, severity, or affected countries
Threats Tagged 'cve-2025-15396'
Click on any threat for detailed analysis and mitigation recommendations
CVE-2025-15396 is a high-severity reflected Cross-Site Scripting (XSS) vulnerability in the Library Viewer WordPress plugin versions before 3.2.0. The vulnerability arises because the plugin fails to properly sanitize and escape certain parameters before reflecting them in the page output. This flaw allows attackers to craft malicious URLs that, when visited by high-privilege users such as administrators, can execute arbitrary scripts in their browsers. Exploitation requires user interaction but no prior authentication, and it can impact confidentiality, integrity, and availability by stealing session tokens, performing actions on behalf of admins, or defacing content. Although no known exploits are currently reported in the wild, the vulnerability’s CVSS score of 7.1 indicates a significant risk. European organizations using the Library Viewer plugin on WordPress sites, especially those with administrative users accessing the plugin, should prioritize patching or mitigating this issue. Countries with high WordPress adoption and significant digital infrastructure, such as Germany, the UK, France, and the Netherlands, are more likely to be affected. Join the discussion | CVE Database V5 | 02/02/2026, 06:00:02 UTC Added: 02/02/2026, 06:27:47 UTC |
Showing 1 to 1 of 1 result