CVE-2025-15654 – WordPress Prague plugin

CVE ID :CVE-2025-15654

Published : June 3, 2026, 9:16 a.m. | 1 hour, 16 minutes ago

Description :Improper Neutralization of Input During Web Page Generation (‘Cross-site Scripting’) vulnerability in Fox-themes Prague allows Reflected XSS.

This issue affects Prague: from n/a through 2.2.8.

Severity: 7.1 | HIGH

Visit the link for more details, such as CVSS details, affected products, timeline, and more…