PT-2025-54331 · WordPress · Soli Wp Post Signature

Nabil Irawan · Published 2025-12-31 · Updated 2026-01-01 · CVE-2025-62124

Positive Technologies (AI Summary)

CVSS v3.1

5.9

Medium

Base vector

AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:L

Name of the Vulnerable Software and Affected Versions Soli WP Post Signature versions through 0.4.1

Description The software contains a flaw due to improper handling of user-supplied data when creating web pages, which can lead to Stored Cross-site Scripting (XSS). This allows an attacker to inject malicious scripts into web pages viewed by other users. The vulnerability exists because the application does not properly sanitize user input before including it in the generated web page. This could allow an attacker to execute arbitrary JavaScript code in the context of a victim's browser.

Recommendations Update Soli WP Post Signature to a version later than 0.4.1.

Fix

XSS

Weakness Enumeration

CWE-79

Related Identifiers

CVE-2025-62124

Affected Products

Soli Wp Post Signature

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2025-62124 · Security Note
• https://vdp.patchstack.com/database/wordpress/plugin/wp-post-signature/vulnerability/wordpress-wp-post-signature-plugin-0-4-1-cross-site-scripting-xss-vulnerability?_s_id=cve · Note
• https://twitter.com/CVEnew/status/2006736842050461747 · Twitter Post
• https://patchstack.com/database/wordpress/plugin/wp-post-signature/vulnerability/wordpress-wp-post-signature-plugin-0-4-1-cross-site-scripting-xss-vulnerability?_s_id=cve · Note
• https://patchstack.com/database/Wordpress/Plugin/wp-post-signature/vulnerability/wordpress-wp-post-signature-plugin-0-4-1-cross-site-scripting-xss-vulnerability?_s_id=cve · Note