CVE-2025-39576: WordPress WPAdverts plugin <= 2.2.1 - Cross Site Scripting (XSS) Vulnerability
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Greg Winiarski WPAdverts allows Stored XSS. This issue affects WPAdverts: from n/a through 2.2.1.
Other sources
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Greg Winiarski WPAdverts wpadverts allows Stored XSS.This issue affects WPAdverts: from n/a through <= 2.2.1.
— MITRE
Affected Software
Remediation
Information
Event History
Frequently Asked Questions
What is the severity of CVE-2025-39576?
CVE-2025-39576 has been classified with severity due to its potential for Stored Cross-site Scripting (XSS) attacks.
How do I fix CVE-2025-39576?
To fix CVE-2025-39576, update WPAdverts to version 2.2.2 or later.
What versions of WPAdverts are affected by CVE-2025-39576?
CVE-2025-39576 affects all versions of WPAdverts up to and including 2.2.1.
What is Cross-site Scripting as it relates to CVE-2025-39576?
Cross-site Scripting in CVE-2025-39576 allows attackers to inject malicious scripts into web pages viewed by users.
Can CVE-2025-39576 impact my WordPress site?
Yes, if you are using an affected version of WPAdverts, CVE-2025-39576 can significantly impact your WordPress site's security.