CVE-2025-31442

UNKNOWN 0.0

WordPress Search engine keywords highlighter plugin <= 0.1.3 - Reflected Cross Site Scripting (XSS) vulnerability

CVSS Score

0.0

EPSS Score

0.0%

EPSS Percentile

0th

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in e1tekoap42 Search engine keywords highlighter keywords-highlight-tool allows Reflected XSS.This issue affects Search engine keywords highlighter: from n/a through <= 0.1.3.

CWE	CWE-79
Vendor	e1tekoap42
Product	search engine keywords highlighter
Published	Apr 3, 2025
Last Updated	Apr 1, 2026

Stay Ahead of the Next One

Get instant alerts for e1tekoap42 search engine keywords highlighter

Be the first to know when new unknown vulnerabilities affecting e1tekoap42 search engine keywords highlighter are published — delivered to Slack, Telegram or Discord.

Get Free Alerts → Free · No credit card · 60 sec setup

Affected Versions

e1tekoap42 / Search engine keywords highlighter

0 ≤ 0.1.3

References

NVD ↗ CVE.org ↗ EPSS Data ↗

patchstack.com: https://patchstack.com/database/Wordpress/Plugin/keywords-highlight-tool/vulnerability/wordpress-search-engine-keywords-highlighter-plugin-0-1-3-reflected-cross-site-scripting-xss-vulnerability?_s_id=cve

Credits

johska | Patchstack Bug Bounty Program