CVE-2025-12652 | Ungapped Widgets Plugin on WordPress prefillvalues cross site scripting

A vulnerability was found in Ungapped Widgets Plugin on WordPress and classified as problematic. Affected is an unknown function. Such manipulation of the argument prefillvalues leads to cross site scripting.

This vulnerability is listed as CVE-2025-12652. The attack may be performed from remote. There is no available exploit.VulDB Recent EntriesRead More