TI-2025-28981 CVE-2025-46229 · GHSA-fwxv-fxgj-63xvWordPress Textmetrics plugin <= 3.6.2 - Cross Site Scripting (XSS) VulnerabilityPriority LOW 26Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Israpil Textmetrics webtexttool allows Stored XSS.This issue affects Textmetrics: from n/a through <= 3.6.2.CVSS 3.1MEDIUM 5.9· Network · High privileges · User interaction · EPSS 0.00232 · Published 2025-04-22 · No fix listed CWE-79