CVE-2025-11453 | Header and Footer Scripts Plugin up to 2.2.2 on WordPress _inpost_head_script cross site scripting

January 9, 2026 Yanac

A vulnerability has been found in Header and Footer Scripts Plugin up to 2.2.2 on WordPress and classified as problematic. Affected by this issue is some unknown functionality. This manipulation of the argument _inpost_head_script causes cross site scripting.

This vulnerability is handled as CVE-2025-11453. The attack can be initiated remotely. There is not any exploit available.VulDB Recent EntriesRead More