Signal is active with 2 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
The Get Use APIs WordPress plugin before 2.0.10 executes imported JSON, which could allow users with a role as low as contributor to perform Cross-Site Scripting attacks under certain server configurations.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
NONE
Momentum
NONE
CVE-2025-15363 The Get Use APIs WordPress plugin before 2.0.10 executes imported JSON, which could allow users with a role as low as contributor to perform Cross-Site Scripting att… https://www.cve.org/CVERecord?id=CVE-2025-15363
Post summary
CVE‑2025‑15363 is a vulnerability in the Get Use APIs WordPress plugin that lets low‑privilege users execute imported JSON, enabling Cross‑Site Scripting attacks.
CVE-2025-15363 Cross-Site Scripting in Get Use APIs WordPress Plugin Before 2.0.10 https://vulmon.com/vulnerabilitydetails?qid=CVE-2025-15363
Post summary
The snippet announces CVE‑2025‑15363, a cross‑site scripting flaw in the Get Use APIs WordPress plugin before version 2.0.10, with no PoC, exploit, or mitigation details provided.