WordPress Advanced Appointment Booking & Scheduling plugin <= 2.1 - Cross Site Request Forgery (CSRF) vulnerability

Cross Site Request Forgery CSRF vulnerability discovered by Nabil Irawan in WordPress Plugin Advanced Appointment Booking & Scheduling versions = 2.1...

WordPress WP Category Dropdown Plugin <= 1.9 - Cross Site Scripting (XSS) Vulnerability

Cross Site Scripting XSS Vulnerability discovered by zaim in WordPress Plugin WP Category Dropdown versions = 1.9...

CVE-2025-57951 WordPress SiteNarrator Text-to-Speech Widget Plugin <= 1.9 - Cross Site Scripting (XSS) Vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in ken107 SiteNarrator Text-to-Speech Widget allows Stored XSS. This issue affects SiteNarrator Text-to-Speech Widget: from n/a through 1.9...

CVE-2025-57951

CVE-2025-57951 is a Stored XSS in the SiteNarrator Text-to-Speech Widget for WordPress (SiteNarrator Text-to-Speech Widget, plugin likely named sitespeaker-widget). Initial description cites improper input neutralization during web page generation and affected versions up to 1.9. CVSS v3.1 base s...

CVE-2025-57978 WordPress Advanced Appointment Booking & Scheduling Plugin <= 1.9 - Cross Site Request Forgery (CSRF) Vulnerability

Cross-Site Request Forgery CSRF vulnerability in themespride Advanced Appointment Booking & Scheduling allows Cross Site Request Forgery. This issue affects Advanced Appointment Booking & Scheduling: from n/a through 1.9...

CVE-2025-58239

CVE-2025-58239 describes a stored cross-site scripting vulnerability in the WordPress plugin “Category Dropdown” (WP Category Dropdown) by GCS Design, affecting versions up to 1.9 (input handling during web page generation is not properly neutralized). The CVE entry notes stored XSS as the vulner...

WordPress plugin SiteNarrator Text-to-Speech Widget 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. WordPress plugin is an application plugin that provides the ability to host a personal blog site on a PHP and MySQL based server. A cross-site scripting...

WordPress plugin Advanced Appointment Booking & Scheduling 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A cross-site request...

PT-2025-38801

Name of the Vulnerable Software and Affected Versions ken107 SiteNarrator Text-to-Speech Widget versions through 1.9 Description The ken107 SiteNarrator Text-to-Speech Widget contains a flaw due to improper neutralization of input during web page generation, leading to a Stored Cross-site Scripti...

PT-2025-38904

Name of the Vulnerable Software and Affected Versions Chandrika Sista WP Category Dropdown versions through 1.9 Description The software contains a flaw related to improper input handling during web page creation, specifically a Stored Cross-Site Scripting issue. This allows for the injection of...

WordPress plugin WP Category Dropdown 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A cross-site scripting...

CVE-2025-58832

CVE-2025-58832 corresponds to a stored XSS in the WordPress plugin Search by Google (versions

WordPress Strux theme <= 1.9 - Local File Inclusion vulnerability

Local File Inclusion vulnerability discovered by Bonds in WordPress Theme Strux versions = 1.9...

WordPress plugin Search by Google 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers with PHP and MySQL. WordPress plugin is an application plugin. A cross-site scripting vulnerability...

WordPress The Barber Shop theme <= 1.9 - PHP Object Injection vulnerability

PHP Object Injection vulnerability discovered by Tran Nguyen Bao Khanh VCI - VNPT Cyber Immunity in WordPress Theme The Barber Shop versions = 1.9...

Linux Distros Unpatched Vulnerability : CVE-2022-40314

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A remote code execution risk when restoring backup files originating from Moodle 1.9 was identified. CVE-2022-40314 Note that Nessus relies on the presence of t...

CVE-2025-49424

CVE-2025-49424 corresponds to a Cross-Site Scripting (XSS) vulnerability in the WordPress plugin Essential Doo Components for Visual Composer (versions up to 1.9). The root cause is improper input neutralization during web page generation, enabling DOM-based XSS. PatchStack notes the affected plu...

CVE-2025-49424 WordPress Essential Doo Components for Visual Composer plugin <= 1.9 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in diego.benna Essential Doo Components for Visual Composer allows DOM-Based XSS. This issue affects Essential Doo Components for Visual Composer: from n/a through 1.9...

PT-2025-33951 · Diego.Benna · Essential Doo Components For Visual Composer

Name of the Vulnerable Software and Affected Versions: Essential Doo Components for Visual Composer versions n/a through 1.9 Description: An Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' issue exists in diego.benna Essential Doo Components for Visual Composer,...

WordPress plugin Essential Doo Components for Visual Composer 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. WordPress plugin is an application plugin that supports personal blog sites on PHP and MySQL servers. A security vulnerability exists in WordPress plugin...