CVE-2025-58209
BaseFortify
Publication date: 2025-08-27
Last updated on: 2026-04-23
Assigner: Patchstack
Description
Description
CVSS Scores
EPSS Scores
| Probability: | |
| Percentile: |
Meta Information
Affected Vendors & Products
| Vendor | Product | Version / Range |
|---|---|---|
| rtcamp | transcoder | 1.4.0 |
Helpful Resources
Exploitability
| CWE ID | Description |
|---|---|
| CWE-79 | The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users. |
Attack-Flow Graph
AI Powered Q&A
Can you explain this vulnerability to me?
CVE-2025-58209 is a Stored Cross-Site Scripting (XSS) vulnerability in the WordPress Transcoder Plugin versions up to 1.4.0. It allows a malicious user with contributor-level privileges to inject malicious scripts, such as redirects or advertisements, into the website. These scripts execute when visitors access the compromised site, potentially leading to unauthorized actions or data exposure. [1]
How can this vulnerability impact me? :
This vulnerability can impact you by allowing attackers to execute malicious scripts on your website, which can lead to unauthorized redirects, display of unwanted advertisements, or other harmful HTML payloads. This can degrade user trust, compromise user data, and potentially lead to further exploitation of your site. Although the severity is rated as low (CVSS 6.5), the attacks are typically automated and opportunistic, affecting all vulnerable sites indiscriminately. [1]
How can this vulnerability be detected on my network or system? Can you suggest some commands?
Detection of this vulnerability involves identifying if the WordPress Transcoder Plugin version is up to 1.4.0 and checking for signs of stored XSS payloads injected by contributor-level users. Since the vulnerability allows malicious scripts to be stored and executed on the website, scanning the website content for suspicious scripts or unusual HTML payloads is recommended. Patchstack suggests professional incident response or server-side malware scanning rather than relying solely on plugin-based malware scanners, which may be tampered with. Specific commands are not provided in the resources. [1]
What immediate steps should I take to mitigate this vulnerability?
Immediate mitigation steps include updating the WordPress Transcoder Plugin to version 1.4.1 or later, where the vulnerability is fixed. Additionally, Patchstack offers virtual patching (vPatching) as an immediate mitigation strategy that auto-mitigates the vulnerability before official patches are applied, providing rapid protection without performance loss. In case of compromise, professional incident response or server-side malware scanning is recommended. [1]