CVE-2025-13746 | ForumWP Plugin up to 2.1.6 on WordPress Display Name cross site scripting

A vulnerability was found in ForumWP Plugin up to 2.1.6 on WordPress. It has been declared as problematic. This vulnerability affects unknown code of the component Display Name Handler. Executing a manipulation can lead to cross site scripting.

This vulnerability is tracked as CVE-2025-13746. The attack can be launched remotely. No exploit exists.