CVE-2025-11834: WP AD Gallery <= 1.3 - Authenticated (Contributor+) Stored Cross-Site Scripting
The WP AD Gallery plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'startindex' parameter of the ad-gallery shortcode in all versions up to, and including, 1.3. This is due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-11834?
CVE-2025-11834 is classified as a high severity vulnerability due to its potential for Stored Cross-Site Scripting attacks.
How do I fix CVE-2025-11834?
To fix CVE-2025-11834, update the WP AD Gallery plugin to version 1.4 or later, which addresses the input sanitization issues.
What types of attacks can CVE-2025-11834 facilitate?
CVE-2025-11834 can facilitate Stored Cross-Site Scripting attacks, allowing attackers to inject malicious scripts.
Which versions of WP AD Gallery are affected by CVE-2025-11834?
CVE-2025-11834 affects all versions of the WP AD Gallery plugin up to and including version 1.3.
What is the cause of the vulnerability CVE-2025-11834?
The cause of CVE-2025-11834 is insufficient input sanitization and output escaping in the handling of the 'startindex' parameter.