Unrated severityNVD Advisory· Published Sep 17, 2026

CVE-2025-15697

Description

The Dictionary WordPress plugin through 1.0 does not escape user input before reflecting it back in the responses of several directly accessible scripts, allowing unauthenticated attackers to perform Reflected Cross-Site Scripting attacks against anyone they can induce to submit a crafted request.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

WordPress/Dictionary WordPress pluginllm-create
Range: <=1.0

Patches

Vulnerability mechanics

References

wpscan.com/vulnerability/b0d12b0d-4717-4854-8911-2a0e60eed515/nvd

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000