CVE-2025-5585 | SiteOrigin Widgets Bundle Plugin up to 1.68.5 on WordPress data-url cross site scripting

June 24, 2025 Yanac

A vulnerability was found in SiteOrigin Widgets Bundle Plugin up to 1.68.5 on WordPress. It has been classified as problematic. This affects an unknown part. The manipulation of the argument data-url leads to cross site scripting.

This vulnerability is uniquely identified as CVE-2025-5585. It is possible to initiate the attack remotely. There is no exploit available.VulDB Recent EntriesRead More