CVE-2025-69033

MediumCVSS 6.5

Published: 30/12/2025(UTC)Updated: 07/10/2026(UTC)Translated: 01/10/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.15%

4th percentile - higher than 4% of all known CVEs

Summary

DOM-Based XSS vulnerability in Blog Filter (WordPress plugin) allows an attacker to manipulate the DOM in the victim's browser. Affects versions up to and including 1.7.3.

Risk Assessment

An attacker can execute malicious script in the page context, potentially leading to data theft, session hijacking, or phishing.

Recommendation

Update Blog Filter to a version newer than 1.7.3. Ensure that input data is properly validated and sanitized.

Other vulnerabilities in Blog Filter

CVE-2026-39517Medium
The Blog Filter plugin for WordPress up to version 1.7.6 contains a DOM-based XSS vulnerability. Improper input neutralization during page generation allows an attacker to inject malicious scripts in the DOM context.

Original NVD description (English source)

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in A WP Life Blog Filter blog-filter allows DOM-Based XSS.This issue affects Blog Filter: from n/a through <= 1.7.3.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS