CVE-2025-13908 | The Tooltip Plugin up to 1.0.2 on WordPress Shortcode the_tooltip cross site scripting

January 9, 2026 Yanac

A vulnerability was found in The Tooltip Plugin up to 1.0.2 on WordPress and classified as problematic. This affects the function the_tooltip of the component Shortcode Handler. Such manipulation leads to cross site scripting.

This vulnerability is uniquely identified as CVE-2025-13908. The attack can be launched remotely. No exploit exists.VulDB Recent EntriesRead More