A vulnerability described as problematic has been identified in Inactive Logout Plugin up to 3.5.5 on WordPress. This issue affects some unknown processing. Such manipulation of the argument ina_redirect_page_individual_user leads to cross site scripting.

This vulnerability is listed as CVE-2025-11922. The attack may be performed from remote. There is no available exploit.