CVE-2025-4169 | Posts per Cat Plugin up to 1.4.2 on WordPress Shortcode ppc cross site scripting

A vulnerability, which was classified as problematic, has been found in Posts per Cat Plugin up to 1.4.2 on WordPress. This issue affects the function ppc of the component Shortcode Handler. The manipulation leads to cross site scripting. This vulnerability only affects products that are no longer supported by the maintainer.

The identification of this vulnerability is CVE-2025-4169. The attack may be initiated remotely. There is no exploit available.