Medium severity4.8NVD Advisory· Published Feb 14, 2022· Updated Jun 17, 2026

CVE-2021-25050

Description

The Remove Footer Credit WordPress plugin before 1.0.11 does properly sanitise its settings, allowing high privilege users to perform Cross-Site Scripting attacks even when the unfiltered_html is disallowed.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Wpchill/Remove Footer Credit
cpe:2.3:a:wpchill:remove_footer_credit:*:*:*:*:*:*:*:*
Range: <1.0.11
WordPress/Visual Footer Credit Removercpe-rescue
Package: https://wordpress.org/plugins/visual-footer-credit-remover
WordPress/Remove Footer Creditllm-create
Range: <1.0.11

Patches

Vulnerability mechanics

References

plugins.trac.wordpress.org/changeset/2655918nvdPatchThird Party Advisory
wpscan.com/vulnerability/25a28adb-794f-4bdb-89e8-060296b45b38nvdExploitThird Party Advisory

News mentions

No linked articles in our index yet.

cvss	0.312
epss	0.001
exploit	0.000
kev	0.000
patch	-0.070
ransomware	0.000