CVE-2025-62926

MediumCVSS 6.5

Published: 21/12/2025(UTC)Updated: 19/10/2026(UTC)Translated: 20/10/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.15%

4th percentile - higher than 4% of all known CVEs

Summary

The WordPress plugin TempTool [Show Current Template Info] is vulnerable to stored XSS due to improper neutralization of input during web page generation. The vulnerability affects versions from n/a through <= 1.3.1.

Risk Assessment

An attacker could inject a malicious script that executes in the browser of an administrator or users, potentially leading to session hijacking or data theft.

Recommendation

Update the TempTool [Show Current Template Info] plugin to a version newer than 1.3.1 if available, or apply appropriate mitigations.

Other vulnerabilities in TempTool [Show Current Template Info]

CVE-2025-62955Medium
The HappyDevs TempTool [Show Current Template Info] plugin in versions up to and including 1.3.1 exposes sensitive system information to an unauthorized control sphere, allowing retrieval of embedded sensitive data.

Original NVD description (English source)

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in HappyDevs TempTool [Show Current Template Info] current-template-name allows Stored XSS.This issue affects TempTool [Show Current Template Info]: from n/a through <= 1.3.1.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS