CVE-2025-15697 in Dictionary Plugin
Zusammenfassung
von MITRE • 17.09.2026
The Dictionary WordPress plugin through 1.0 does not escape user input before reflecting it back in the responses of several directly accessible scripts, allowing unauthenticated attackers to perform Reflected Cross-Site Scripting attacks against anyone they can induce to submit a crafted request.
If you want to get best quality of vulnerability data, you may have to visit VulDB.