VYPR
← All advisories
Medium severity6.5NVD Advisory· Published Dec 9, 2025· Updated Jun 17, 2026

CVE-2025-67543

CVE-2025-67543

Description

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Catch Themes Essential Widgets essential-widgets allows Stored XSS.This issue affects Essential Widgets: from n/a through <= 2.2.2.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

4
  • Catch Themes/Essential Widgetsv5
    Range: 0
  • Catchthemes/Essential Widgets2 versions
    cpe:2.3:a:catchthemes:essential_widgets:*:*:*:*:free:wordpress:*:*+ 1 more
    • cpe:2.3:a:catchthemes:essential_widgets:*:*:*:*:free:wordpress:*:*range: <2.3
    • cpe:2.3:a:catchthemes:essential_widgets:*:*:*:*:pro:wordpress:*:*range: <2.8
  • WordPress/Essential Widgetsllm-fuzzy
    Range: <=2.2.2

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.