Skip to content

Davidangel Photofade vulnerabilities

davidangel photofadePhotoFade <= 0.2.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode AttributesCVE-2025-138476.4 MediumJanuary 7, 2026