CVE-2025-12649 | SortTable Post Plugin up to 4.2 on WordPress Shortcode ID cross site scripting

November 26, 2025 Yanac

A vulnerability marked as problematic has been reported in SortTable Post Plugin up to 4.2 on WordPress. The affected element is an unknown function of the component Shortcode Handler. Performing manipulation of the argument ID results in cross site scripting.

This vulnerability was named CVE-2025-12649. The attack may be initiated remotely. There is no available exploit.VulDB Recent EntriesRead More