TI-2025-30638 CVE-2025-48312 · GHSA-v73r-r59j-2p5mWordPress WPAvatar plugin <= 1.9.4 - Cross Site Scripting (XSS) vulnerabilityPriority LOW 28Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in 文派翻译(WP Chinese Translation) WPAvatar wpavatar allows Stored XSS.This issue affects WPAvatar: from n/a through <= 1.9.…CVSS 3.1MEDIUM 6.5· Network · Low privileges · User interaction · EPSS 0.00209 · Published 2025-08-28 · No fix listed CWE-79