CVE-2025-54706: WordPress Magical Posts Display Plugin plugin <= 1.2.52 - Cross Site Scripting (XSS) Vulnerability
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Noor Alam Magical Posts Display allows DOM-Based XSS. This issue affects Magical Posts Display: from n/a through 1.2.52.
Other sources
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Noor Alam Magical Posts Display magical-posts-display allows DOM-Based XSS.This issue affects Magical Posts Display: from n/a through <= 1.2.52.
— MITRE
Affected Software
Remediation
Information
Event History
Frequently Asked Questions
What is the severity of CVE-2025-54706?
CVE-2025-54706 is classified as a high severity vulnerability due to its potential for DOM-Based XSS attacks.
How do I fix CVE-2025-54706?
To fix CVE-2025-54706, update the Noor Alam Magical Posts Display plugin to version 1.2.53 or later.
What software is affected by CVE-2025-54706?
CVE-2025-54706 affects Noor Alam Magical Posts Display versions up to 1.2.52, including the WordPress plugin version.
What type of vulnerability is CVE-2025-54706?
CVE-2025-54706 is an Improper Neutralization of Input During Web Page Generation vulnerability, leading to Cross-site Scripting (XSS).
Can CVE-2025-54706 be exploited remotely?
Yes, CVE-2025-54706 can be exploited remotely if an attacker can inject malicious scripts into the affected web pages.