PT-2026-26029 · WordPress · Get Use Apis

Ahmed Makawi · Published 2026-03-18 · Updated 2026-03-18 · CVE-2025-15363

Positive Technologies (AI Summary)

CVSS v3.1

5.9

Medium

Base vector

AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:L

Name of the Vulnerable Software and Affected Versions Get Use APIs WordPress plugin versions prior to 2.0.10

Description The Get Use APIs WordPress plugin executes imported JSON, potentially enabling Cross-Site Scripting (XSS) attacks. Users with a contributor role or higher may be able to perform these attacks under specific server configurations.

Recommendations Update the Get Use APIs WordPress plugin to version 2.0.10 or later.

Exploit

Fix

XSS

Weakness Enumeration

CWE-79

Related Identifiers

CVE-2025-15363

Affected Products

Get Use Apis

References · 4

• 🔥 https://wpscan.com/vulnerability/428d08bb-5329-4406-a785-131bae4ed085 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2025-15363 · Security Note
• https://twitter.com/CVEnew/status/2034365320417407065 · Twitter Post
• https://twitter.com/VulmonFeeds/status/2034245118773916076 · Twitter Post