plugin

Jb News Ticker Vulnerabilities

2 known security issues reported for the Jb News Ticker WordPress plugin. Most recent disclosed Oct 21, 2025.

1 medium

Running Jb News Ticker on your site? Check whether your installed version is affected.

Scan your site free

JB News Ticker <= 1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting

medium

The JB News Ticker plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'id' shortcode attribute of the 'jbticker' shortcode in all versions up to, and including, 1.0. This is due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with contri...

CVSS:
6.4
Affected:
up to 1.0
Fix:
No patched version reported
Disclosed:
Oct 21, 2025

CVE-2025-11804 on NVD →

JB News Ticker [jb-news-ticker] <= 1.0 (unfixed)

unknown
Affected:
up to 1.0
Fix:
No patched version reported

CVE-2025-11804 on NVD →

Protect your WordPress site

Run a free security scan to detect vulnerable plugins and themes, exposed files, and malware — no plugin install, no signup.

Scan your site free

← Back to the vulnerability database