SEPTEMBER 20, 2026
Live Feed
Back to database
Case File

CVE-2025-68081

MEDIUM · CVSS 5.9 EPSS 0.17%

Source: NVD + CISA KEV + EPSS · Published 2026-07-23 · Last synced 2026-08-22

CyberRota Analysis

AI-Generated

The vulnerability in WP-Polls versions up to 2.77.3 allows for administrator-level Cross Site Scripting (XSS), potentially enabling attackers to execute malicious scripts in the context of an administrator's session. This could lead to unauthorized actions or data exposure within the application. Organizations using affected versions should prioritize patching to mitigate the risk of exploitation.

CVE
CVE-2025-68081
Severity
MEDIUM
CVSS
5.9
EPSS
0.17%

Original NVD Description

Administrator Cross Site Scripting (XSS) in WP-Polls <= 2.77.3 versions.