CVE Intelligence

Loopus WP Virtual Assistant vulnerabilities

🔔 Create alert RSS Version checker

Published CVEs affecting Loopus WP Virtual Assistant: 2 record(s), with affected versions and fixes.

CVE-2025-22725 High · 7.1 CWE-79 Jan 8, 2026
WordPress WP Virtual Assistant plugin <= 3.1 - Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in loopus WP Virtual Assistant VirtualAssistant allows Stored XSS.This issue affects WP Virtual Assistant: from n/a through <= 3.1.
CVE-2025-60155 Medium · 5.3 CWE-862 Sep 26, 2025
WordPress WP Virtual Assistant Plugin <= 3.0 - Broken Access Control Vulnerability
Missing Authorization vulnerability in loopus WP Virtual Assistant VirtualAssistant allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Virtual Assistant: from n/a through <= 3.0.