CVE-2025-13862 | Menu Card Plugin up to 0.8.0 on WordPress Shortcode Category cross site scripting

January 9, 2026 Yanac

A vulnerability, which was classified as problematic, was found in Menu Card Plugin up to 0.8.0 on WordPress. Affected by this vulnerability is an unknown functionality of the component Shortcode Handler. The manipulation of the argument Category results in cross site scripting.

This vulnerability is known as CVE-2025-13862. It is possible to launch the attack remotely. No exploit is available.VulDB Recent EntriesRead More