TI-2025-12926 CVE-2025-14145 · GHSA-8hfq-r7gh-7rxh
Cross-site scripting in djrowling Niche Hero | Beautifully-designed blocks in seconds
Priority LOW 28
The Niche Hero | Beautifully-designed blocks in seconds plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'spacing' parameter of the nh_row shortcode in all versions up to, and including, 1.0.5 du…