Medium severity6.1NVD Advisory· Published Oct 1, 2025· Updated Apr 15, 2026

CVE-2025-9512

Description

The Schema & Structured Data for WP & AMP WordPress plugin before 1.50 does not properly handles HTML tag attribute modifications, making it possible for unauthenticated attackers to conduct Stored XSS attacks via post comments.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

WordPress/Schema And Structured Data For Wpinferred
Range: <1.50
Package: https://wordpress.org/plugins/schema-and-structured-data-for-wp
Structured Data For Wp/Download Schema \& Structured Data For Wp \& Ampllm-fuzzy
Range: <1.50

Patches

Vulnerability mechanics

References

wpscan.com/vulnerability/e45d9335-3665-4155-abdf-9eeea250f1ba/nvd

News mentions

No linked articles in our index yet.

cvss	0.397
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000