CVE-2025-11827 | Oboxmedia Ads Plugin up to 1.9.8 on WordPress Shortcode oboxads-ad-widget after_widget cross site scripting

October 22, 2025 Yanac

A vulnerability was found in Oboxmedia Ads Plugin up to 1.9.8 on WordPress. It has been classified as problematic. This affects the function oboxads-ad-widget of the component Shortcode Handler. Performing manipulation of the argument after_widget results in cross site scripting.

This vulnerability is identified as CVE-2025-11827. The attack can be initiated remotely. There is not any exploit available.VulDB Recent EntriesRead More