TI-2025-08322 CVE-2025-9080 · GHSA-2m2f-pp9p-r7fq
Generic Elements <= 1.2.8 - Authenticated (Contributor+) Stored Cross-Site Scripting
Priority LOW 28
The Generic Elements plugin for WordPress is vulnerable to Stored Cross-Site Scripting via multiple widget fields in version 1.2.8 and earlier.