5.9
Medium
CVE-2025-15363 The Get Use APIs WordPress plugin before 2.0.10 executes imported JSON, which could allow users with a role as low as…
Description
The Get Use APIs WordPress plugin before 2.0.10 executes imported JSON, which could allow users with a role as low as contributor to perform Cross-Site Scripting attacks under certain server configurations.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Get Use APIs 2.0 | earliest → < 2.0.10 | 2.0.10 |