CVE-2025-11834 | WP AD Gallery Plugin up to 1.3 on WordPress Shortcode ad-gallery startindex cross site scripting

October 22, 2025 Yanac

A vulnerability classified as problematic has been found in WP AD Gallery Plugin up to 1.3 on WordPress. Impacted is the function ad-gallery of the component Shortcode Handler. The manipulation of the argument startindex leads to cross site scripting.

This vulnerability is traded as CVE-2025-11834. It is possible to initiate the attack remotely. There is no exploit available.VulDB Recent EntriesRead More