CVE-2025-12965 | Magical Posts Display Plugin up to 1.2.54 on WordPress Magical Posts Accordion Widget mpac_title_tag cross site scripting

A vulnerability identified as problematic has been detected in Magical Posts Display Plugin up to 1.2.54 on WordPress. Affected by this vulnerability is an unknown functionality of the component Magical Posts Accordion Widget. The manipulation of the argument mpac_title_tag leads to cross site scripting.

This vulnerability is traded as CVE-2025-12965. It is possible to initiate the attack remotely. There is no exploit available.