WordPress Plugin Vulnerabilities

Typing Effect <= 1.3.7 - Authenticated (Contributor+) Stored Cross-Site Scripting

Description

The Typing Effect plugin for WordPress is vulnerable to Stored Cross-Site Scripting in all versions up to, and including, 1.3.7. This is due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.

Affects Plugins

References

Classification

Type
XSS
CWE

Miscellaneous

Original Researcher
Ananda Dhakal
Verified
No

Timeline

Publicly Published
2026-08-18 (about 1 month ago)
Added
2026-08-24 (about 1 month ago)
Last Updated
2026-08-24 (about 1 month ago)

Other