CVE-2025-11897 | The7 Plugin up to 12.9.1 on WordPress the7_fancy_title_css cross site scripting

October 25, 2025 Yanac

A vulnerability described as problematic has been identified in The7 Plugin up to 12.9.1 on WordPress. This impacts the function the7_fancy_title_css. Executing manipulation can lead to cross site scripting.

This vulnerability is handled as CVE-2025-11897. The attack can be executed remotely. There is not any exploit available.VulDB Recent EntriesRead More