Skip to content
Sign in
5.9 Medium

CVE-2025-58821 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in wpdever WP…

Description

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in wpdever WP Notification Bell wp-notification-bell allows Stored XSS.This issue affects WP Notification Bell: from n/a through <= 1.4.6.

Affected products and versions

Product Affected versions Fixed in
WP Notification Bell 1.4 earliest → 1.4.6 No fix stated

Other CVEs of WP Notification Bell

The 3 CVEs of WP Notification Bell →
CVE-2024-13362 Multiple plugins and/or themes for WordPress are vulnerable to Reflected Cross-Site Scripting via the url parameter in… 6.1 Medium CVE-2022-4974 The Freemius SDK, as used by hundreds of WordPress plugin and theme developers, was vulnerable to Cross-Site Request… 6.3 Medium
Track this CVE