WordPress security by component
Business Name Generator
Business Name Generator (business-name-generator) is a WordPress plugin with 1 published CVE record in this archive. The latest tracked vulnerability was published Sep 19, 2026; the highest published CVSS base score is 3.5.
Plugin slug:
business-name-generatorLatest vulnerability
CVE-2025-15698: Business Name Generator settings bypass restricted HTML privileges
A high-privilege user such as an Administrator can store script-bearing settings that are not sufficiently sanitized or escaped. Execution when affected settings output is viewed crosses the intended unfiltered_html restriction, including on multisite. The export does not disclose the specific setting, endpoint or output function. Authoritative affected range: <= 1.3. No fixed release is confirmed in this review.
| Safe version |
|
||
|---|---|---|---|
| Sep 19, 2026 |
CVE-2025-15698
Business Name Generator settings bypass restricted HTML privileges
A high-privilege user such as an Administrator can store script-bearing settings that are not sufficiently sanitized or escaped. Execution when affected settings output is viewed crosses the intended unfiltered_html restriction, including on multisite. The export does not disclose the specific setting, endpoint or output function. Authoritative affected range: <= 1.3. No fixed release is confirmed in this review.
|
See mitigation notes |
CVE3.5
|