CVE-2025-13903 | PullQuote Plugin up to 1.0 on WordPress Shortcode pullquote cross site scripting

January 9, 2026 Yanac

A vulnerability was found in PullQuote Plugin up to 1.0 on WordPress. It has been rated as problematic. Impacted is the function pullquote of the component Shortcode Handler. The manipulation leads to cross site scripting.

This vulnerability is referenced as CVE-2025-13903. Remote exploitation of the attack is possible. No exploit is available.VulDB Recent EntriesRead More