CVE-2025-32175: WordPress VK Filter Search plugin <= 2.20.2 - Cross Site Scripting (XSS) vulnerability
Published Apr 4, 2025
·Updated
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Vektor,Inc. VK Filter Search vk-filter-search allows Stored XSS.This issue affects VK Filter Search: from n/a through <= 2.20.2.
Affected Software
1 affected component
Vektor VK Filter Search<=2.20.2
Event History
Apr 4, 2025
CVE Published
via MITRE·03:58 PM
Data Sourced
via MITRE·03:58 PM
DescriptionSeverityWeakness
Data Sourced
via NVD·04:15 PM
DescriptionWeakness
Frequently Asked Questions
1
What is the severity of CVE-2025-32175?
CVE-2025-32175 is a high-severity vulnerability classified as Stored XSS.
2
How do I fix CVE-2025-32175?
To fix CVE-2025-32175, update the VK Filter Search plugin to the latest version above 2.14.1.0.
3
What is the impact of CVE-2025-32175?
The impact of CVE-2025-32175 includes the potential for attackers to execute malicious scripts in the context of an authenticated user's session.
4
Who is affected by CVE-2025-32175?
CVE-2025-32175 affects users who have installed VK Filter Search version 2.14.1.0 or lower.
5
What should I do if I am unable to update for CVE-2025-32175?
If updating is not possible, consider disabling the VK Filter Search plugin to mitigate the risk of CVE-2025-32175.