CVE-2025-13853 | Nearby Now Reviews Plugin up to 5.2 on WordPress Shortcode Attribute data_tech cross site scripting

January 9, 2026 Yanac

A vulnerability, which was classified as problematic, has been found in Nearby Now Reviews Plugin up to 5.2 on WordPress. Affected is an unknown function of the component Shortcode Attribute Handler. The manipulation of the argument data_tech leads to cross site scripting.

This vulnerability is traded as CVE-2025-13853. It is possible to initiate the attack remotely. There is no exploit available.VulDB Recent EntriesRead More