What is the CVSS score of CVE-2025-48145?

CVE-2025-48145 has a CVSS 3.1 base score of 7.1 (High). CVSS vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L. EPSS exploitation probability: 0.0%.

Which versions of Michal Jaworski Track are affected by CVE-2025-48145?

A reflected cross-site scripting (XSS) vulnerability in the WP Tao WordPress plugin affects versions up to 1.3, allowing attackers to inject malicious scripts that execute in users' browsers.

How to fix or mitigate CVE-2025-48145?

Within 24 hours: Audit all WordPress installations to identify WP Tao plugin deployments and affected versions. Within 7 days: Implement Web Application Firewall (WAF) rules to block suspicious input parameters for this plugin, disable the plugin if non-critical to operations, or restrict access via network segmentation. Within 30 days: Monitor the vendor repository for patch availability and establish automated patching procedures upon release; consider evaluating alternative plugins with active security maintenance.

Michal Jaworski Track CVE-2025-48145

EUVD-2025-18536 HIGH

Cross-site Scripting (XSS) (CWE-79)

2025-06-17 audit@patchstack.com

XSS

7.1

CVSS 3.1 · NVD

Severity by source

NVD PRIMARY

7.1 HIGH

AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L

Attack Vector

Network

Attack Complexity

Low

Privileges Required

None

User Interaction

Required

Scope

Changed

Confidentiality

Low

Integrity

Low

Availability

Low

Lifecycle Timeline

Re-analysis Queued

Apr 23, 2026 - 15:42 vuln.today

cvss_changed

EUVD ID Assigned

Mar 14, 2026 - 22:15 euvd

EUVD-2025-18536

Analysis Generated

Mar 14, 2026 - 22:15 vuln.today

CVE Published

Jun 17, 2025 - 15:15 nvd

HIGH 7.1

DescriptionCVE.org

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Michal Jaworski Track, Analyze & Optimize by WP Tao allows Reflected XSS. This issue affects Track, Analyze & Optimize by WP Tao: from n/a through 1.3.