CVE-2025-12450

{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2025-12450", "assignerOrgId": "b15e7b5b-3da4-40ae-a43c-f7aa60e62599", "state": "PUBLISHED", "assignerShortName": "Wordfence", "dateReserved": "2025-10-28T20:45:41.236Z", "datePublished": "2025-10-29T09:27:57.311Z", "dateUpdated": "2026-04-08T17:10:46.784Z"}, "containers": {"cna": {"providerMetadata": {"orgId": "b15e7b5b-3da4-40ae-a43c-f7aa60e62599", "shortName": "Wordfence", "dateUpdated": "2026-04-08T17:10:46.784Z"}, "affected": [{"vendor": "litespeedtech", "product": "LiteSpeed Cache", "versions": [{"version": "0", "status": "affected", "lessThanOrEqual": "7.5.0.1", "versionType": "semver"}], "defaultStatus": "unaffected"}], "descriptions": [{"lang": "en", "value": "The LiteSpeed Cache plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via URLs in all versions up to, and including, 7.5.0.1 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that execute if they can successfully trick a user into performing an action such as clicking on a link."}], "title": "LiteSpeed Cache <= 7.5.0.1 - Reflected Cross-Site Scripting", "references": [{"url": "https://www.wordfence.com/threat-intel/vulnerabilities/id/98f71c32-9453-4598-acb5-242818508c74?source=cve"}, {"url": "https://github.com/litespeedtech/lscache_wp/commit/3d473f44d37ec2a834162ff1d86c017e9ae67db3"}], "problemTypes": [{"descriptions": [{"lang": "en", "description": "CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')", "cweId": "CWE-79", "type": "CWE"}]}], "metrics": [{"cvssV3_1": {"version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "baseScore": 6.1, "baseSeverity": "MEDIUM"}}], "credits": [{"lang": "en", "type": "finder", "value": "Nicholas Giemsa"}], "timeline": [{"time": "2025-10-28T21:00:40.000Z", "lang": "en", "value": "Vendor Notified"}, {"time": "2025-10-28T00:00:00.000Z", "lang": "en", "value": "Disclosed"}]}, "adp": [{"metrics": [{"other": {"type": "ssvc", "content": {"timestamp": "2025-10-29T13:59:23.823522Z", "id": "CVE-2025-12450", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2025-10-29T13:59:32.341Z"}}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2025-12450", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "version": "2.0.3", "timestamp": "2025-10-29T13:59:23.823522Z"}}}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2025-10-29T13:59:28.388Z"}}], "cna": {"title": "LiteSpeed Cache <= 7.5.0.1 - Reflected Cross-Site Scripting", "credits": [{"lang": "en", "type": "finder", "value": "Nicholas Giemsa"}], "metrics": [{"cvssV3_1": {"version": "3.1", "baseScore": 6.1, "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N"}}], "affected": [{"vendor": "litespeedtech", "product": "LiteSpeed Cache", "versions": [{"status": "affected", "version": "*", "versionType": "semver", "lessThanOrEqual": "7.5.0.1"}], "defaultStatus": "unaffected"}], "timeline": [{"lang": "en", "time": "2025-10-28T21:00:40.000Z", "value": "Vendor Notified"}, {"lang": "en", "time": "2025-10-28T00:00:00.000Z", "value": "Disclosed"}], "references": [{"url": "https://www.wordfence.com/threat-intel/vulnerabilities/id/98f71c32-9453-4598-acb5-242818508c74?source=cve"}, {"url": "https://github.com/litespeedtech/lscache_wp/commit/3d473f44d37ec2a834162ff1d86c017e9ae67db3"}], "descriptions": [{"lang": "en", "value": "The LiteSpeed Cache plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via URLs in all versions up to, and including, 7.5.0.1 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that execute if they can successfully trick a user into performing an action such as clicking on a link."}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-79", "description": "CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')"}]}], "providerMetadata": {"orgId": "b15e7b5b-3da4-40ae-a43c-f7aa60e62599", "shortName": "Wordfence", "dateUpdated": "2025-10-29T09:27:57.311Z"}}}, "cveMetadata": {"cveId": "CVE-2025-12450", "state": "PUBLISHED", "dateUpdated": "2025-10-29T13:59:32.341Z", "dateReserved": "2025-10-28T20:45:41.236Z", "assignerOrgId": "b15e7b5b-3da4-40ae-a43c-f7aa60e62599", "datePublished": "2025-10-29T09:27:57.311Z", "assignerShortName": "Wordfence"}, "dataVersion": "5.1"}

{"affected": [{"affectedData": [{"defaultStatus": "unaffected", "product": "LiteSpeed Cache", "vendor": "litespeedtech", "versions": [{"lessThanOrEqual": "7.5.0.1", "status": "affected", "version": "0", "versionType": "semver"}]}], "source": "security@wordfence.com"}], "cveTags": [], "descriptions": [{"lang": "en", "value": "The LiteSpeed Cache plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via URLs in all versions up to, and including, 7.5.0.1 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that execute if they can successfully trick a user into performing an action such as clicking on a link."}, {"lang": "es", "value": "El plugin LiteSpeed Cache para WordPress es vulnerable a cross-site scripting reflejado a trav\u00e9s de URLs en todas las versiones hasta la 7.5.0.1, inclusive, debido a una sanitizaci\u00f3n de entrada y un escape de salida insuficientes. Esto permite que atacantes no autenticados inyecten scripts web arbitrarios en p\u00e1ginas que se ejecutan si logran enga\u00f1ar a un usuario para que realice una acci\u00f3n como hacer clic en un enlace."}], "id": "CVE-2025-12450", "lastModified": "2026-10-08T11:10:00.250", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 6.1, "baseSeverity": "MEDIUM", "confidentialityImpact": "LOW", "integrityImpact": "LOW", "privilegesRequired": "NONE", "scope": "CHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "version": "3.1"}, "exploitabilityScore": 2.8, "impactScore": 2.7, "source": "security@wordfence.com", "type": "Secondary"}], "ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2025-12450", "options": [{"exploitation": "none"}, {"automatable": "no"}, {"technicalImpact": "partial"}], "role": "CISA Coordinator", "timestamp": "2025-10-29T13:59:23.823522Z", "version": "2.0.3"}}]}, "published": "2025-10-29T10:15:36.903", "references": [{"source": "security@wordfence.com", "url": "https://github.com/litespeedtech/lscache_wp/commit/3d473f44d37ec2a834162ff1d86c017e9ae67db3"}, {"source": "security@wordfence.com", "url": "https://www.wordfence.com/threat-intel/vulnerabilities/id/98f71c32-9453-4598-acb5-242818508c74?source=cve"}], "sourceIdentifier": "security@wordfence.com", "vulnStatus": "Deferred", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-79"}], "source": "security@wordfence.com", "type": "Secondary"}]}

{}

{"analysis": {"en": {"generated_at": "2026-04-22T00:41:07.218613+00:00", "value": {"mitigation_remediation": ["Upgrade LiteSpeed Cache to version 7.5.0.2 or later, the fix that removes the unfiltered query variables.", "If an upgrade cannot be performed immediately, disable the LiteSpeed Cache plugin or remove the affected shortcode handling, preventing the vulnerable code path from executing.", "Apply a web\u2011application firewall rule or enforce a strict content\u2011security\u2011policy that blocks inline scripts and restricts script sources, mitigating the risk of any residual injection."], "summary": {"action": "Apply Patch", "impact": "Reflected Cross\u2011Site Scripting (unrestricted script injection)"}, "threat_synthesis": {"affected_systems": "All WordPress sites that run LiteSpeed Cache version 7.5.0.1 or older are affected. The issue is located within the LiteSpeed Cache plugin distributed by LiteSpeed Technologies and can impact any WordPress installation that has not upgraded beyond the mentioned version.", "description_and_impact": "The LiteSpeed Cache plugin for WordPress contains a reflected cross\u2011site scripting flaw caused by inadequate sanitization of user input and missing output escaping. The vulnerability allows an attacker to embed arbitrary JavaScript into a page that will execute when a victim follows a crafted link. Because the flaw is triggered solely by incoming URLs, authentication is not required and any eligible user of a vulnerable WordPress site can be targeted.", "risk_and_exploitability": "The CVSS score of 6.1 reflects moderate exploitability and potential impact. EPSS indicates a very low probability of exploitation (<1%), and the vulnerability is not listed in the CISA KEV catalog, suggesting it is not actively exploited in the wild as of the last update. The attack vector inferred is via a user clicking a maliciously crafted URL, which then causes the victim\u2019s browser to execute injected script. No additional privileges or system access are required."}}}}, "created": "2025-10-30T14:38:48.645729+00:00", "updated": "2026-04-22T00:45:04.160909+00:00", "vendors": ["litespeedtech", "litespeedtech$PRODUCT$litespeed_cache", "wordpress", "wordpress$PRODUCT$wordpress"]}