Skyword XMLRPC publishing
Skyword XMLRPC publishing has 2 disclosed vulnerabilities in the WordSec catalog, all reported in 2025; 1 is fixed and 1 remains unpatched as of September 2026. Their average CVSS score is 6.4, and the most serious one scores 6.4 out of 10. 2025 was the busiest year with 2 disclosures.
The most common weakness is Cross-Site Scripting, behind 2 of the records (100%).
1 of the records (50%) have a vendor fix, while 1 remain unpatched. The oldest unresolved one dates back to 2025.
2 independent researchers contributed these findings, one record each. Skyword XMLRPC publishing is installed on roughly 60 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 6.7.7.
CVE-2025-58703Skyword API Plugin <= 2.5.3 - Authenticated (Contributor+) Stored Cross-Site Scripting
Read the full analysisVulnerability Records
Skyword XMLRPC publishing
Author
skyword
Skyword360 is the leading comprehensive content production platform. Skyword360 enables brands, retailers, media companies, and agencies to acquire and engage customers by efficiently producing quality content optimized for search and the social web. Quality content is essential for reaching and engaging consumers today, but the creation process is messy, inconsistent and immeasurable. Skyword360 makes it easy to produce, optimize, and promote content at any scale to create meaningful, lasting relationships with customers.
Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C