CVE-2025-11197 | dartiss Draft List Plugin up to 2.6.1 on WordPress Shortcode drafts cross site scripting

October 11, 2025 Yanac

A vulnerability was found in dartiss Draft List Plugin up to 2.6.1 on WordPress. It has been classified as problematic. The impacted element is the function drafts of the component Shortcode Handler. The manipulation leads to cross site scripting.

This vulnerability is listed as CVE-2025-11197. The attack may be initiated remotely. There is no available exploit.VulDB Recent EntriesRead More