CVE-2025-30963

The JetSmartFilters plugin for WordPress contains a security flaw that allows malicious users with at least contributor-level access to inject unauthorized code into the site's content. This vulnerability arises from inadequate filtering of input data and insufficient protection against script injection, enabling attackers to embed executable scripts in pages that will run when accessed by other users.

Based on public CVE data (MITRE/NVD).