Known CVE

Broadstreet WordPress plugin - Reflected XSS

Broadstreet WordPress plugin < 1.51.8 contains a reflected XSS caused by unsanitised and unescaped parameter output, letting attackers execute scripts against high privilege users such as admin, exploit requires victim interaction.

CVE-2025-4652

Medium2025CVSS 6.1CWE-79

cve2025 · broadstreetads · broadstreet · authenticated · wordpress · wp · wp-plugin · xss

Verified scans run this check after you prove you own the site.

All known CVEs View the checks catalog National Vulnerability Database

Scan a website