Unrated severityNVD Advisory· Published Jun 17, 2026· Updated Jun 17, 2026
WordPress SweetDate Core plugin < 1.1.5 - Reflected Cross Site Scripting (XSS) vulnerability
CVE-2025-69140
Description
Unauthenticated Cross Site Scripting (XSS) in SweetDate Core < 1.1.5 versions.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
1- Range: <1.1.5
Patches
Vulnerability mechanics
References
1News mentions
1- Wordfence Intelligence Weekly WordPress Vulnerability Report (May 25, 2026 to May 31, 2026)Wordfence Blog · Jun 4, 2026