CVE-2025-69152

HighCVSS 7.1

Published: 02/07/2026(UTC)Updated: 02/07/2026(UTC)Translated: 03/07/2026(UTC)NVD NIST

Summary

The Artale | Wedding Photography WordPress plugin version 2.2.2 and earlier contains an unauthenticated Cross Site Scripting (XSS) vulnerability. An attacker can inject malicious script without requiring authentication.

Risk Assessment

The risk involves the execution of arbitrary JavaScript code in visitors' browsers, potentially leading to session theft, redirects to malicious sites, or data theft.

Recommendation

It is recommended to immediately update the Artale | Wedding Photography plugin to a version newer than 2.2.2 that fixes this vulnerability.

Original NVD description (English source)

Unauthenticated Cross Site Scripting (XSS) in Artale | Wedding Photography WordPress <= 2.2.2 versions.