A vulnerability labeled as problematic has been found in DesignThemes Core Features Plugin up to 2.3 on WordPress. This affects an unknown function. Executing a manipulation can lead to cross site scripting.

This vulnerability is registered as CVE-2025-69302. It is possible to launch the attack remotely. No exploit is available.