What is CVE-2025-9427?

CVE-2025-9427 is a vulnerability in Lemonsoft Wordpress Add-on, classified under Cross-site Scripting. Published 2026-01-13.

Is CVE-2025-9427 known to be exploited?

1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.

XSS in Lemonsoft Wordpress Add-on

CVE-2025-9427

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Lemonsoft WordPress add on allows Cross-Site Scripting (XSS).This issue affects WordPress add on: 2025.7.1.

Vulnerability class: XSS (Cross-Site Scripting)

EPSS: 0.003 (23.8th percentile) — read the EPSS interpretation.

Affected products

Lemonsoft Wordpress Add-on — versions 2025.7.1, 2025.8.1

Weakness classification (CWE)

CWE-79 — Cross-site Scripting

Public proof-of-concept exploits

zast-ai/vulnerability-reports

References

db4dfee8-a97e-4877-bfae-eba6d14a2166

Frequently asked questions

What is CVE-2025-9427?: CVE-2025-9427 is a vulnerability in Lemonsoft Wordpress Add-on, classified under Cross-site Scripting. Published 2026-01-13.
Is CVE-2025-9427 known to be exploited?: 1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.