CVE-2025-47625: WordPress DoFollow Case by Case plugin <= 3.5.1 - Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in apasionados DoFollow Case by Case dofollow-case-by-case allows Stored XSS.This issue affects DoFollow Case by Case: from n/a through <= 3.5.1.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-47625?
CVE-2025-47625 is classified as high severity due to its potential for enabling Stored Cross-site Scripting (XSS) attacks.
How do I fix CVE-2025-47625?
To fix CVE-2025-47625, update your DoFollow Case by Case plugin to the latest version beyond 3.5.1.
Which versions of DoFollow Case by Case are affected by CVE-2025-47625?
CVE-2025-47625 affects all versions of DoFollow Case by Case up to and including version 3.5.1.
What type of vulnerability is CVE-2025-47625?
CVE-2025-47625 is a Cross-site Scripting (XSS) vulnerability that allows for stored injections.
What can attackers achieve by exploiting CVE-2025-47625?
Exploiting CVE-2025-47625 allows attackers to execute arbitrary JavaScript code in the context of a user's browser session.