Vulnerability in Get Use Apis
CVE-2025-15363
The Get Use APIs WordPress plugin before 2.0.10 executes imported JSON, which could allow users with a role as low as contributor to perform Cross-Site Scripting attacks under certain server configurations.
EPSS: 0.000 (12.9th percentile) — read the EPSS interpretation.
Affected products
- Unknown Get Use Apis — versions 0
References
- wpscan.com/vulnerability/428d08bb-5329-4406-a785-131bae4ed085/ (exploit, vdb-entry, technical-description)