WordPress security by component

Ayyash Studio — The kick-start kit

Plugin description

Ayyash Studio — The kick-start kit is a WordPress component with 1 published CVE record in this archive. The latest tracked vulnerability was published Mar 26, 2025; the highest CVE/CNA score is 6.4.

Plugin slug: ayyash-studio

Latest vulnerability

CVE-2025-2576: Ayyash Studio — The kick-start kit: Cross-site scripting

Ayyash Studio — The kick-start kit is affected by cross-site scripting. Exploitation requires at least author-level access. Injected script can execute in the affected site's origin when the vulnerable output is viewed.

PublishedMar 26, 2025

Safe version guidanceSee mitigation notes

		Safe version
Mar 26, 2025	CVE-2025-2576 Ayyash Studio — The kick-start kit: Cross-site scripting Ayyash Studio — The kick-start kit is affected by cross-site scripting. Exploitation requires at least author-level access. Injected script can execute in the affected site's origin when the vulnerable output is viewed.	See mitigation notes	CVE6.4 NVDPending