CVE-2025-15708 | Live Composer Plugin up to 2.1.22 on WordPress Custom Post Type Slug Settings slug cross site scripting

November 7, 2026 Yanac

A vulnerability has been found in Live Composer Plugin up to 2.1.22 on WordPress and classified as problematic. This impacts an unknown function of the component Custom Post Type Slug Settings. This manipulation of the argument slug causes cross site scripting.

This vulnerability appears as CVE-2025-15708. The attack may be initiated remotely. There is no available exploit.

The affected component should be upgraded.VulDB Recent EntriesRead More