WordPress plugin
Flexible Blogtitle security & vulnerabilities
Unpatched vulnerability in the latest version
At least one vulnerability affects the latest version and no fix has been released. Deactivate the plugin or restrict access to the affected feature until the vendor ships a patch.
- Critical0
- High0
- Medium1
- Low0
All Flexible Blogtitle vulnerabilities
| Severity | Vulnerability | CVE | Published |
|---|---|---|---|
| Medium6.1 | Reflected Cross-Site Scripting ≤0.1No patch available | CVE-2025-23846 |
- Medium6.1Reflected Cross-Site Scripting
≤0.1No patch available
Flexible Blogtitle: common questions
Does Flexible Blogtitle have known vulnerabilities?
Yes. VulnCrest Radar lists 1 known vulnerability in Flexible Blogtitle: 1 medium. At least one is not fixed in the latest version.
How do I check which version of Flexible Blogtitle I run?
In wp-admin open Plugins → Installed Plugins; the version is shown under the name. Without admin access, our passive Check my site tool can often read it from public files.
What is the most recent Flexible Blogtitle vulnerability?
CVE-2025-23846, published Jan 16, 2025: Flexible Blogtitle <= 0.1 - Reflected Cross-Site Scripting. Severity: Medium (CVSS 6.1).
Is any Flexible Blogtitle vulnerability listed in CISA KEV?
No. None of the known Flexible Blogtitle vulnerabilities is currently listed in the CISA KEV catalog.