TI-2025-10894 CVE-2025-11883 · GHSA-7p2x-p32x-wgxf
Responsive Progress Bar <= 1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Priority LOW 28
The Responsive Progress Bar plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's rprogress shortcode in versions less than, or equal to, 1.0 due to insufficient input sanitization and output…