TI-2025-12763 CVE-2025-13967 · GHSA-wc63-83rx-8qcg
Cross-site scripting in woodpeckerleadform Woodpecker for WordPress
Priority LOW 28
The Woodpecker for WordPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'form_name' parameter of the [woodpecker-connector] shortcode in all versions up to, and including, 3.0.4 due to insu…