TI-2025-11622 CVE-2025-12670 · GHSA-3r4p-72g5-w4r3
wp-twitpic <= 1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Priority LOW 28
The wp-twitpic plugin for WordPress is vulnerable to Stored Cross-Site Scripting via multiple parameters of the 'twitpic' shortcode in all versions up to, and including, 1.0 due to insufficient input sanitization and out…