Critical Vulnerability Discovered: CVE-2025–22567

Cybersecurity is an ever-evolving field, and staying ahead of vulnerabilities is crucial to ensuring a safer digital world. Today, we’re diving into a recently discovered vulnerability affecting the WordPress TRUSTist REVIEWer Plugin (<= 2.0), which has been assigned CVE-2025–22567.

This vulnerability, categorized under CWE-79: Improper Neutralization of Input During Web Page Generation (‘Cross-site Scripting’), enables Reflected XSS attacks. It allows malicious actors to inject scripts into web pages, which are then executed in the context of users interacting with the vulnerable plugin.

Affected Plugin: TRUSTist REVIEWer (versions from n/a through 2.0)CVE Description: Improper input neutralization during web page generation allows Reflected Cross-Site Scripting (XSS).Severity: High (CVSS: 7.1)Impact:Confidentiality: Sensitive information can be stolen.Integrity: Data can be manipulated or compromised.Availability: Services can be disrupted.Exploitation: Remote attackers can exploit this vulnerability if a user…