TI-2025-02152 CVE-2025-2477 · GHSA-vx58-4hch-xmjf
CryoKey <= 2.4 - Reflected Cross-Site Scripting via 'ckemail' Parameter
Priority LOW 21
The CryoKey plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the ‘ckemail’ parameter in all versions up to, and including, 2.4 due to insufficient input sanitization and output escaping.