CVE-2025-13854 | Curved Text Plugin up to 0.1 on WordPress Shortcode radius cross site scripting

January 9, 2026 Yanac

A vulnerability classified as problematic has been found in Curved Text Plugin up to 0.1 on WordPress. This affects an unknown function of the component Shortcode Handler. Performing a manipulation of the argument radius results in cross site scripting.

This vulnerability is reported as CVE-2025-13854. The attack is possible to be carried out remotely. No exploit exists.VulDB Recent EntriesRead More