Simple Pull Quote

Simple Pull Quote has one disclosed vulnerability in the WordSec catalog, all reported in 2025; it is fixed as of September 2026. Their average CVSS score is 6.4, and the most serious one scores 6.4 out of 10.

The most common weakness is Cross-Site Scripting, behind 1 of the records (100%).

The one issue recorded for Simple Pull Quote has a vendor fix available, so running the current release closes it.

All of these findings were reported by Muhammad Yudha - DJ. Simple Pull Quote is installed on roughly 1,000 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 6.6.7.

Strategic Overview

Avg CVSSMedium
6.4/ 10
Patch Coverage100%
Open

0

Fixed

1

Get automatic notifications for all Simple Pull Quote vulnerabilities before they are exploited.

Highest severity on recordCVSS 6.4CVE-2025-62985

Simple Pull Quote <= 1.6.3 - Authenticated (Contributor+) Stored Cross-Site Scripting

Read the full analysis

Vulnerability Records

1 records
Simple Pull Quote banner
Latestv1.6.4

Simple Pull Quote

llamaman

Author

llamaman

4.2(10)
84/100
Last Updated
2025-11-24 (10mo ago)
Active Installs
1,000+
Downloads
84,288
Requires WP
2.5+
Requires PHP
7.2.5+
Tested up to
WP 6.6.7
Created
2009-04-23 (18y ago)

Simple Pull Quote WordPress Plugin provides an easy way for you to insert pull quotes into your posts and pages. It adds an easy-to-use “Pullquote” button to both the HTML and TinyMCE editors. IMPORTANT: To use in the new WordPress (Gutenberg) editor, you can either: 1. use the “Classic” block. 2. Use shortcodes such as [pullquote class="left”]TEXT HERE[/pullquote] See the plugin in action as well as how to use it: http://youtu.be/JGudI9gr9iE Usage Select the text that you want to use as your pull quote. Click on the “Pullquote” button in either the Visual or HTML editor. For more help on usage, visit the Simple Pull Quote Homepage for a visual guide. How do I update the look of the pull quotes? To change the look of your pull quotes, open your theme’s “style.css” file and create a CSS class called “simplePullQuotes”. Edit this class according to your tastes. IMPORTANT: Make sure your theme’s “wp_head()” function comes before your theme’s stylesheet or else this won’t work. How do I use more than one pull quote in a single post or page? Simply select the text that you want to use as a pull quote and click the “Pullquote” button in either the visual or html editor.

Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C