CVE-2025-11800 | Surbma Plugin up to 2.0 on WordPress Shortcode minicrm ID cross site scripting

November 21, 2025 Yanac

A vulnerability classified as problematic was found in Surbma Plugin up to 2.0 on WordPress. The impacted element is the function minicrm of the component Shortcode Handler. The manipulation of the argument ID results in cross site scripting.

This vulnerability is identified as CVE-2025-11800. The attack can be executed remotely. There is not any exploit available.VulDB Recent EntriesRead More