TI-2025-10880 CVE-2025-11868 · GHSA-r8pr-jj4f-h96reverviz <= 1.1 - Authenticated (Contributor+) Stored Cross-Site ScriptingPriority LOW 28The everviz plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the `everviz` shortcode attributes in versions up to, and including, 1.1.CVSS 3.1MEDIUM 6.4· Network · Low privileges · No interaction · EPSS 0.00199 · Published 2025-11-18 · No fix listed CWE-79