CVE-2025-63027

UNKNOWN

WordPress WBC907 Core plugin <= 3.4.1 - Cross Site Scripting (XSS) vulnerability

Published Dec 30, 2025

Modified 3 days ago

Details

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in webcreations907 WBC907 Core wbc907-core allows Stored XSS.This issue affects WBC907 Core: from n/a through <= 3.4.1.

References

WEB

https://patchstack.com/database/Wordpress/Plugin/wbc907-core/vulnerability/wordpress-wbc907-core-plugin-3-4-1-cross-site-scripting-xss-vulnerability?_s_id=cve

ADVISORY

https://www.cve.org/CVERecord?id=CVE-2025-63027

Weakness Type (CWE)

Injection

CWE-79

Cross-site Scripting (XSS)

Ecosystems

Timeline

PublishedDec 30, 2025

ModifiedApr 1, 2026