Live Vulnerability Intelligence
Threat Database
Search CVEs, inspect descriptions, and open detail pages with AI-assisted technical context.
Threat Entry
Updated 2025-02-16
CVE-2025-22676 - AWS S3 for WordPress Plugin – Upcasted
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in upcasted AWS S3 for WordPress Plugin – Upcasted allows Stored XSS. This issue affects AWS S3 for WordPress Plugin – Upcasted: from n/a through 3.0.3.
PLUGIN
AWS S3 for WordPress Plugin – Upcasted
CVE-2025-22676
Risk Score