CVE-2025-15658

MediumCVSS 5.9

Published: 15/06/2026(UTC)Updated: 15/06/2026(UTC)Translated: 17/06/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.14%

4th percentile — higher than 4% of all known CVEs

There is a Cross Site Scripting (XSS) vulnerability in WP Emmet versions <= 0.3.4 that can be exploited by administrators.

An attacker could exploit this vulnerability to inject malicious code, potentially leading to data theft or session hijacking of the administrator.

It is recommended to update WP Emmet to the latest version to mitigate this vulnerability.

Original NVD description (English source)

Administrator Cross Site Scripting (XSS) in WP Emmet <= 0.3.4 versions.