CVE-2025-54009

The JetSmartFilters plugin for WordPress contains a security flaw in versions 3.6.8 and earlier, allowing malicious users with contributor privileges or higher to embed unauthorized code into website content. This code can then be executed by unsuspecting visitors when they access the compromised pages. The vulnerability stems from inadequate filtering of user input and insufficient protection against injected scripts.

Based on public CVE data (MITRE/NVD).