Page Title Splitter
Page Title Splitter has one disclosed vulnerability in the WordSec catalog, all reported in 2025; it remains unpatched as of September 2026. Their average CVSS score is 6.4, and the most serious one scores 6.4 out of 10.
The most common weakness is Cross-Site Scripting, behind 1 of the records (100%).
The one issue recorded for Page Title Splitter has no published fix yet, which makes virtual patching the only reliable mitigation. The oldest unresolved one dates back to 2025.
All of these findings were reported by Muhammad Yudha - DJ. Page Title Splitter is installed on roughly 1,000 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 6.5.10.
CVE-2025-62744Page Title Splitter <= 2.5.9 - Authenticated (Contributor+) Stored Cross-Site Scripting
Read the full analysisVulnerability Records
Page Title Splitter
Author
Chris Steman
Lets you set breakpoints on your posts, pages and custom post types titles without having to add html to the title by setting markers in the title text field. This allow for a better layout of the title on desktop version of the site and when on a mobile device it gives you the ability to remove the breakpoints by adjusting the CSS. Some of the other uses are that you can set multiple markers in the text field to highlight colours of certain words in the title.
Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C