CVE-2025-11819 | WP-Thumbnail Plugin up to 1.1 on WordPress Shortcode cross site scripting

October 22, 2025 Yanac

A vulnerability identified as problematic has been detected in WP-Thumbnail Plugin up to 1.1 on WordPress. This impacts an unknown function of the component Shortcode Handler. The manipulation leads to cross site scripting.

This vulnerability is documented as CVE-2025-11819. The attack can be initiated remotely. There is not any exploit available.VulDB Recent EntriesRead More