CVE-2025-30626: WordPress Multimedia Playlist Slider Addon for WPBakery Page Builder <= 2.1 - Cross Site Scripting (XSS) Vulnerability
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in LambertGroup Multimedia Playlist Slider Addon for WPBakery Page Builder allows Reflected XSS. This issue affects Multimedia Playlist Slider Addon for WPBakery Page Builder: from n/a through 2.1.
Other sources
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in LambertGroup Multimedia Playlist Slider Addon for WPBakery Page Builder lbgvpyoutubevimeoaddonvisualcomposer allows Reflected XSS.This issue affects Multimedia Playlist Slider Addon for WPBakery Page Builder: from n/a through <= 2.1.
— MITRE
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-30626?
The severity of CVE-2025-30626 is classified as high due to its potential for reflected cross-site scripting attacks.
How do I fix CVE-2025-30626?
To fix CVE-2025-30626, update the Multimedia Playlist Slider Addon for WPBakery Page Builder to version 2.1 or later.
What are the potential impacts of CVE-2025-30626?
The potential impacts of CVE-2025-30626 include unauthorized access to user sessions and data theft through reflected XSS attacks.
Which versions of the Multimedia Playlist Slider Addon for WPBakery Page Builder are affected by CVE-2025-30626?
CVE-2025-30626 affects versions of the Multimedia Playlist Slider Addon for WPBakery Page Builder up to and including version 2.1.
Is user input at risk with CVE-2025-30626?
Yes, user input is at risk with CVE-2025-30626 due to improper neutralization during web page generation, allowing XSS vulnerabilities.