A vulnerability classified as problematic has been found in WZ Followed Posts Plugin up to 3.1.0 on WordPress. This affects the function
wfp
of the component Shortcode Handler. The manipulation leads to cross site scripting.
This vulnerability is uniquely identified as CVE-2025-4171. It is possible to initiate the attack remotely. There is no exploit available.