Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Remi Corson Easy Theme Options easy-theme-options allows Reflected XSS.This issue affects Easy Theme Options: from n/a through <= 1.0.
History

Fri, 23 Jan 2026 16:45:00 +0000

Type Values Removed Values Added
First Time appeared Wordpress
Wordpress wordpress
Vendors & Products Wordpress
Wordpress wordpress

Thu, 22 Jan 2026 23:00:00 +0000

Type Values Removed Values Added
Description Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Remi Corson Easy Theme Options easy-theme-options allows Reflected XSS.This issue affects Easy Theme Options: from n/a through <= 1.0.
Title WordPress Easy Theme Options plugin <= 1.0 - Reflected Cross Site Scripting (XSS) vulnerability
Weaknesses CWE-79
References

cve-icon MITRE

Status: PUBLISHED

Assigner: Patchstack

Published: 2026-01-22T16:52:09.179Z

Updated: 2026-01-22T16:52:09.179Z

Reserved: 2025-12-24T13:59:58.566Z

Link: CVE-2025-68839

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Received

Published: 2026-01-22T17:16:11.390

Modified: 2026-01-22T17:16:11.390

Link: CVE-2025-68839

cve-icon Redhat

No data.