CVE-2025-4776 | Phlox Plugin up to 2.17.7 on WordPress HTML Attribute data-caption HTML injection

A vulnerability marked as problematic has been reported in Phlox Plugin up to 2.17.7 on WordPress. This vulnerability affects unknown code of the component HTML Attribute Handler. This manipulation of the argument data-caption causes HTML injection.

This vulnerability is registered as CVE-2025-4776. Remote exploitation of the attack is possible. No exploit is available.