cleantalk
Vulnerabilities and Security Researches

WordPress Tooltips, CVE-2025-63005

CVE, Research URL

CVE-2025-63005

Application

WordPress Tooltips

Published on
Dec 31, 2025
Research Description
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Tomas WordPress Tooltips allows Stored XSS.This issue affects WordPress Tooltips: from n/a through 10.7.9.
Affected versions
max 10.7.9.
Status
vulnerable