CVE-2025-11826 | WP Company Info Plugin up to 1.9.0 on WordPress Shortcode cross site scripting

November 21, 2025 Yanac

A vulnerability labeled as problematic has been found in WP Company Info Plugin up to 1.9.0 on WordPress. This vulnerability affects unknown code of the component Shortcode Handler. Such manipulation leads to cross site scripting.

This vulnerability is uniquely identified as CVE-2025-11826. The attack can be launched remotely. No exploit exists.VulDB Recent EntriesRead More