WhisperX tag archive

#CVE-2025-12368

This page collects WhisperX intelligence signals tagged #CVE-2025-12368. It is designed for humans, search engines, and AI agents: each item links to a canonical source-backed record with sector, source, timestamp, credibility, and exportable structured data.

Latest Signals (1)

The Lab · 2026-05-06 22:31:39 · GitHub Issues

1. CVE-2025-12368: Unpatched Stored XSS in Sermon Manager Shortcode Exposes WordPress Sites to Browser Attacks

A confirmed stored cross-site scripting vulnerability in the Sermon Manager WordPress plugin remains without an upstream patch, leaving websites vulnerable to authenticated attacks that execute malicious code in every visitor's browser. CVE-2025-12368 carries a CVSS score of 6.4 (Medium), but security researchers have ...

#CVE-2025-12368#stored-xss#wordpress#plugin-vulnerability#sermon-manager