WordPress plugin
Clicface Trombi security & vulnerabilities
Unpatched vulnerability in the latest version
At least one vulnerability affects the latest version and no fix has been released. Deactivate the plugin or restrict access to the affected feature until the vendor ships a patch.
- Critical0
- High0
- Medium1
- Low0
All Clicface Trombi vulnerabilities
| Severity | Vulnerability | CVE | Published |
|---|---|---|---|
| Medium6.4 | Authenticated (Contributor+) Stored Cross-Site Scripting via nom Parameter ≤2.08No patch available | CVE-2025-0820 |
- Medium6.4Authenticated (Contributor+) Stored Cross-Site Scripting via nom Parameter
≤2.08No patch available
Clicface Trombi: common questions
Does Clicface Trombi have known vulnerabilities?
Yes. VulnCrest Radar lists 1 known vulnerability in Clicface Trombi: 1 medium. At least one is not fixed in the latest version.
How do I check which version of Clicface Trombi I run?
In wp-admin open Plugins → Installed Plugins; the version is shown under the name. Without admin access, our passive Check my site tool can often read it from public files.
What is the most recent Clicface Trombi vulnerability?
CVE-2025-0820, published Feb 28, 2025: Clicface Trombi <= 2.08 - Authenticated (Contributor+) Stored Cross-Site Scripting via nom Parameter. Severity: Medium (CVSS 6.4).
Is any Clicface Trombi vulnerability listed in CISA KEV?
No. None of the known Clicface Trombi vulnerabilities is currently listed in the CISA KEV catalog.