CVE-2025-14445 | DevVN Image Hotspot Plugin up to 1.2.9 on WordPress hotspot_content cross site scripting

February 18, 2026 Yanac

A vulnerability described as problematic has been identified in DevVN Image Hotspot Plugin up to 1.2.9 on WordPress. The affected element is an unknown function. The manipulation of the argument hotspot_content results in cross site scripting.

This vulnerability was named CVE-2025-14445. The attack may be performed from remote. There is no available exploit.VulDB Recent EntriesRead More