PT-2026-5610 · WordPress · Library Viewer

Published 2026-02-02 · Updated 2026-02-07 · CVE-2025-15396

Positive Technologies (AI Summary)

CVSS v3.1

7.1

High

Base vector

AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L

Name of the Vulnerable Software and Affected Versions Library Viewer WordPress plugin versions prior to 3.2.0

Description The software does not properly sanitize and escape parameters before outputting them, resulting in a Reflected Cross-Site Scripting issue. This could potentially be used to target users with high privileges, such as administrators.

Recommendations Update to version 3.2.0 or later.

Exploit

Fix

XSS

Weakness Enumeration

CWE-79

Related Identifiers

CVE-2025-15396

Affected Products

Library Viewer

References · 6

• 🔥 https://wpscan.com/vulnerability/08790e11-019d-4680-a75f-ee0a937f8cc8 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2025-15396 · Security Note
• https://t.me/CVEtracker/43454 · Telegram Post
• https://twitter.com/CVEnew/status/2018227773576265825 · Twitter Post
• https://twitter.com/cracbot/status/2020090212681220435 · Twitter Post
• https://twitter.com/VulmonFeeds/status/2018235972446507039 · Twitter Post