CVE-2025-52742: WordPress Pets Plugin <= 1.4.1 - Cross Site Scripting (XSS) Vulnerability

Q: What does an attacker need to exploit this issue?

The attack can be delivered remotely without authentication, but it requires user interaction. Exploitation involves causing a user to visit or interact with crafted web content that triggers the reflected XSS condition.

Q: Which plugin versions are affected?

Pets versions through 1.4.1 are affected. The available data does not identify a fixed version.

Q: What is the potential impact if exploitation succeeds?

The vulnerability has low confidentiality, integrity, and availability impact, with scope changed. Successful XSS may allow script execution in the context of an affected site user’s browser.

Published Oct 22, 2025

Updated

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Igor Benic Pets pets allows Reflected XSS.This issue affects Pets: from n/a through <= 1.4.1.

Affected Software

1 affected component

WordPress Pets Plugin<=1.4.1

Event History

Oct 22, 2025

CVE Published

via MITRE·02:32 PM

Data Sourced

via MITRE·02:32 PM

DescriptionSeverityWeakness

Data Sourced

via NVD·03:15 PM

DescriptionSeverityWeakness

Frequently Asked Questions

What does an attacker need to exploit this issue?

The attack can be delivered remotely without authentication, but it requires user interaction. Exploitation involves causing a user to visit or interact with crafted web content that triggers the reflected XSS condition.

Which plugin versions are affected?

Pets versions through 1.4.1 are affected. The available data does not identify a fixed version.

What is the potential impact if exploitation succeeds?

The vulnerability has low confidentiality, integrity, and availability impact, with scope changed. Successful XSS may allow script execution in the context of an affected site user’s browser.

CVE-2025-52742: WordPress Pets Plugin <= 1.4.1 - Cross Site Scripting (XSS) Vulnerability

Affected Software

Event History

Frequently Asked Questions

What does an attacker need to exploit this issue?

Which plugin versions are affected?

What is the potential impact if exploitation succeeds?

Company

Resources

Contact

Frequently Asked Questions

What does an attacker need to exploit this issue?

Which plugin versions are affected?

What is the potential impact if exploitation succeeds?