CVE-2026-125433mediumCWE-79

CVE-2026-125433: medium-severity vulnerability in FuturioWP Futurio Extra

WordPress Futurio Extra plugin <= 2.0.25 - Cross Site Scripting (XSS) vulnerability

Published

Follow this CVE+ Monitor Futurio Extra

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

10Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 6.5
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in FuturioWP Futurio Extra futurio-extra allows Stored XSS.This issue affects Futurio Extra: from n/a through 2.0.25.
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L
Affected products
FuturioWP · Futurio Extra
Related CVEs — FuturioWP Futurio Extra

In the same product, most dangerous first.

CVE-2024-53802MEDIUMWordPress Futurio Extra plugin <= 2.0.14 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.3%CVE-2023-40201MEDIUMWordPress Futurio Extra Plugin <= 1.8.4 is vulnerable to Cross Site Request Forgery (CSRF)EPSS 0.3%CVE-2024-50446MEDIUMWordPress Futurio Extra plugin <= 2.0.11 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.3%