What is GHSA-5694-pfmh-9pp4?

GHSA-5694-pfmh-9pp4 is a security advisory published by GitHub Security Advisories with High severity. The Dictionary WordPress plugin through 1.0 does not escape user input before reflecting it back...

Which CVE IDs does GHSA-5694-pfmh-9pp4 cover?

GHSA-5694-pfmh-9pp4 covers the following CVE IDs: CVE-2025-15697. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-5694-pfmh-9pp4?

GHSA-5694-pfmh-9pp4 has a CVSS v3 base score of 7.1, published by GitHub Security Advisories.

GHSA-5694-pfmh-9pp4HighCVSS 7.1

The Dictionary WordPress plugin through 1.0 does not escape user input before reflecting it back...

Vendor

GitHub Security Advisories

Published

September 17, 2026

Last Modified

September 17, 2026

🔗 CVE IDs covered (1)

CVE-2025-15697 →

📋 Description

The Dictionary WordPress plugin through 1.0 does not escape user input before reflecting it back in the responses of several directly accessible scripts, allowing unauthenticated attackers to perform Reflected Cross-Site Scripting attacks against anyone they can induce to submit a crafted request.

🔗 References (3)

https://nvd.nist.gov/vuln/detail/CVE-2025-15697
https://wpscan.com/vulnerability/b0d12b0d-4717-4854-8911-2a0e60eed515
https://github.com/advisories/GHSA-5694-pfmh-9pp4