CVE-2025-52751: WordPress Slide Puzzle plugin <= 1.0.0 - Cross Site Scripting (XSS) vulnerability

Q: What does an attacker need to exploit this issue?

The vulnerability is reflected XSS and requires user interaction. The attack vector is network-based and does not require privileges, so an attacker would need to induce a user to access a crafted request or page.

Q: What could happen if exploitation succeeds?

The available scoring indicates low impacts to confidentiality, integrity, and availability, with scope changed. Successful XSS could allow script execution in the affected web context and affect a user who interacts with the crafted content.

Q: Which versions are affected?

Slide Puzzle versions through 1.0.0 are affected. No fixed version is provided in the available data.

Published Oct 22, 2025

Updated

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in colome Slide Puzzle slide-puzzle allows Reflected XSS.This issue affects Slide Puzzle: from n/a through <= 1.0.0.

Affected Software

2 affected components

Colome Slide Puzzle<=1.0.0

WordPress Slide Puzzle plugin<=1.0.0

Event History

Oct 22, 2025

CVE Published

via MITRE·02:32 PM

Data Sourced

via MITRE·02:32 PM

DescriptionSeverityWeakness

Data Sourced

via NVD·03:15 PM

DescriptionSeverityWeakness

Frequently Asked Questions

What does an attacker need to exploit this issue?

The vulnerability is reflected XSS and requires user interaction. The attack vector is network-based and does not require privileges, so an attacker would need to induce a user to access a crafted request or page.

What could happen if exploitation succeeds?

The available scoring indicates low impacts to confidentiality, integrity, and availability, with scope changed. Successful XSS could allow script execution in the affected web context and affect a user who interacts with the crafted content.

Which versions are affected?

Slide Puzzle versions through 1.0.0 are affected. No fixed version is provided in the available data.

CVE-2025-52751: WordPress Slide Puzzle plugin <= 1.0.0 - Cross Site Scripting (XSS) vulnerability

Affected Software

Event History

Frequently Asked Questions

What does an attacker need to exploit this issue?

What could happen if exploitation succeeds?

Which versions are affected?

Company

Resources

Contact

Frequently Asked Questions

What does an attacker need to exploit this issue?

What could happen if exploitation succeeds?

Which versions are affected?