Now officially on WordPress.org

CVE Database / CVE-2025-15363

CVE · Medium

CVE-2025-15363 — Get Use APIs – JSON Content Importer [json-content-importer] < 2.0.10

CVE Vulnerability Type Severity Affected Fixed in Published Status
CVE-2025-15363 Get Use APIs – JSON Content Importer [json-content-importer] < 2.0.10 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Medium 5.9 < 2.0.10 2.0.10 2026-03-18 —

CVE-2025-15363

The JSON Content Importer plugin for WordPress contains a security flaw that allows malicious users with contributor or higher permissions to embed unauthorized code snippets into the website's content. This vulnerability arises from inadequate filtering of input data and failure to properly encode output, making it possible for attackers to inject executable scripts that will run whenever affected pages are accessed by other users. The issue affects plugin versions 2.0.10 and earlier.

Based on public CVE data (MITRE/NVD).

Scan your WordPress site free

No signup, no credit card — enter your URL and get a security report in seconds.

Run a free scan Get the plugin (free)

See the full security page for this plugin Browse the CVE database Browse all security findings