CVE-2025-12160 | Simple User Registration Plugin up to 6.6 on WordPress wpr_admin_msg cross site scripting

November 21, 2025 Yanac

A vulnerability was found in Simple User Registration Plugin up to 6.6 on WordPress. It has been declared as problematic. Affected is an unknown function. Executing manipulation of the argument wpr_admin_msg can lead to cross site scripting.

This vulnerability appears as CVE-2025-12160. The attack may be performed from remote. There is no available exploit.VulDB Recent EntriesRead More