Tarteaucitron Io

1 CVEs product

Monthly

Sort: Newest CVSS Score EPSS Score Oldest

CVE-2025-4955 Jun 18, 06:15 MEDIUM POC PATCH This Month

The tarteaucitron.io WordPress plugin before 1.9.5 uses query parameters from YouTube oEmbed URLs without sanitizing these parameters correctly, which could allow users with the contributor role and above to perform Stored Cross-site Scripting attacks.

PHP WordPress XSS Tarteaucitron.Io Amauri +1

NVD WPScan

CVSS 3.1

4.7

EPSS

0.1%

CVE-2025-4955

EPSS 0% CVSS 4.7

MEDIUM POC PATCH This Month

The tarteaucitron.io WordPress plugin before 1.9.5 uses query parameters from YouTube oEmbed URLs without sanitizing these parameters correctly, which could allow users with the contributor role and above to perform Stored Cross-site Scripting attacks.

PHP WordPress XSS +3

NVD WPScan

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy