CVE-2025-62967: WordPress DirectoryPress plugin <= 3.6.25 - Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Designinvento DirectoryPress directorypress allows DOM-Based XSS.This issue affects DirectoryPress: from n/a through <= 3.6.25.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-62967?
CVE-2025-62967 has been classified as a high severity vulnerability due to its potential for exploitation via Cross-Site Scripting (XSS).
How do I fix CVE-2025-62967?
To fix CVE-2025-62967, update the DirectoryPress plugin to version 3.6.26 or higher, which addresses the XSS vulnerability.
What systems are affected by CVE-2025-62967?
CVE-2025-62967 affects the Designinvento DirectoryPress plugin versions up to and including 3.6.25.
What type of vulnerability is CVE-2025-62967?
CVE-2025-62967 is categorized as a Cross-Site Scripting (XSS) vulnerability involving improper neutralization of input during web page generation.
Can CVE-2025-62967 lead to data theft?
Yes, CVE-2025-62967 can potentially lead to data theft, as it allows attackers to execute malicious scripts in the context of the user's browser.