CVE-2025-13625

Name of the Vulnerable Software and Affected Versions WP-SOS-Donate Donation Sidebar Plugin for WordPress versions up to and including 0.9.2

Description The plugin is susceptible to Reflected Cross-Site Scripting due to inadequate input sanitization and output escaping. This allows unauthenticated attackers to inject arbitrary web scripts into pages that will execute if a user is tricked into performing an action, such as clicking a link. The vulnerability is related to the $ SERVER['PHP SELF'] parameter.

Recommendations Update WP-SOS-Donate Donation Sidebar Plugin for WordPress to a version later than 0.9.2.