CVE-2025-2078

The BlogBuzzTime for WP plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in all versions up to, and including, 1.1 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with administrator-level permissions and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. This only affects multi-site installations and installations where unfiltered_html has been disabled.

• CWE-79
• CWE-79

• https://wordpress.org/plugins/blogbuzztime-for-wp/Product
• https://www.wordfence.com/threat-intel/vulnerabilities/id/746e47f2-3fe3-439c-bd54-a9bba9c86271?source=cveThird Party Advisory

Published

Mar 12, 2025

Last Modified

Jun 17, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2025-20774In display, there is a possible out of bounds write due to a…6.7
• CVE-2025-20775In display, there is a possible memory corruption due to use…6.7
• CVE-2025-20776In display, there is a possible out of bounds read due to a …6.7
• CVE-2025-20777In display, there is a possible out of bounds write due to a…6.7
• CVE-2025-20778In display, there is a possible out of bounds write due to a…7.8
• CVE-2025-20779In display, there is a possible use after free due to a race…7
• CVE-2025-20780In display, there is a possible memory corruption due to use…7.8
• CVE-2025-20781In display, there is a possible memory corruption due to use…7.8
• CVE-2025-20782In display, there is a possible out of bounds write due to a…6.7
• CVE-2025-20783In display, there is a possible out of bounds write due to a…6.7
• CVE-2025-20784In display, there is a possible memory corruption due to uni…6.7
• CVE-2025-20785In display, there is a possible memory corruption due to use…6.7