CVE-2025-10181 | Draft List Plugin up to 2.6 on WordPress Shortcode drafts cross site scripting

A vulnerability described as problematic has been identified in Draft List Plugin up to 2.6 on WordPress. This vulnerability affects the function drafts of the component Shortcode Handler. Such manipulation leads to cross site scripting.

This vulnerability is traded as CVE-2025-10181. The attack may be launched remotely. There is no exploit available.