WordPress plugin Themesflat Addons For Elementor 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site scripting vulnerability exists...

CVE-2025-32605

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in expresstechsoftware MemberPress Discord Addon expresstechsoftwares-memberpress-discord-add-on allows Reflected XSS.This issue affects MemberPress Discord Addon: from n/a through = 1.1.1...

CVE-2025-32605 WordPress MemberPress Discord Addon Plugin <= 1.1.1 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in expresstechsoftware MemberPress Discord Addon expresstechsoftwares-memberpress-discord-add-on allows Reflected XSS.This issue affects MemberPress Discord Addon: from n/a through = 1.1.1...

CVE-2025-32605

CVE-2025-32605 is a Reflected Cross-Site Scripting (XSS) vulnerability in the WordPress plugin MemberPress Discord Addon (expresstechsoftware) affecting versions up to and including 1.1.1. The root cause is Improper Neutralization of Input During Web Page Generation , i.e., input is not properly ...

CVE-2025-32605 WordPress MemberPress Discord Addon Plugin <= 1.1.1 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in expresstechsoftware MemberPress Discord Addon allows Reflected XSS. This issue affects MemberPress Discord Addon: from n/a through 1.1.1...

CVE-2025-26745

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in RSTheme RS Elements Elementor Addon rselements-lite allows Stored XSS.This issue affects RS Elements Elementor Addon: from n/a through = 1.1.5...

WordPress plugin MemberPress Discord Addon 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site scripting vulnerability exists...

CVE-2025-32605: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in expresstechsoftware MemberPress Discord Addon expresstechsoftwares-memberpress-discord-add-on allows Reflected XSS.This issue affects MemberPress Discord Addon: from n/a through = 1.1.1...

PT-2025-17134 · Expresstechsoftware · Memberpress Discord Addon

Name of the Vulnerable Software and Affected Versions: expresstechsoftware MemberPress Discord Addon versions 1.1.1 and earlier Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting. This allows for Reflected XSS...

CVE-2025-26745

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in RSTheme RS Elements Elementor Addon rselements-lite allows Stored XSS.This issue affects RS Elements Elementor Addon: from n/a through = 1.1.5...

CVE-2025-26745

CVE-2025-26745 : In RS Elements Elementor Addon for WordPress, an Stored XSS exists due to improper neutralization during web page generation. Affected: RS Elements Elementor Addon from n/a through 1.1.5. Root cause and impact are stated; exploitation status is not detailed in the provided docume...

CVE-2025-26745 WordPress RS Elements Elementor Addon plugin <= 1.1.5 - Stored Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in RSTheme RS Elements Elementor Addon rselements-lite allows Stored XSS.This issue affects RS Elements Elementor Addon: from n/a through = 1.1.5...

CVE-2025-26745 WordPress RS Elements Elementor Addon plugin <= 1.1.5 - Stored Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in RSTheme RS Elements Elementor Addon rselements-lite allows Stored XSS.This issue affects RS Elements Elementor Addon: from n/a through = 1.1.5...

CVE-2025-26745: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in RSTheme RS Elements Elementor Addon rselements-lite allows Stored XSS.This issue affects RS Elements Elementor Addon: from n/a through = 1.1.5...

PT-2025-16315

Name of the Vulnerable Software and Affected Versions RSTheme RS Elements Elementor Addon versions 1.1.5 and earlier Description The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, which allows Stored XSS. This enables an attack...

WordPress MemberPress Discord Addon Plugin <= 1.1.1 - Reflected Cross Site Scripting (XSS) vulnerability

Reflected Cross Site Scripting XSS vulnerability discovered by 0xd4rk5id3 in WordPress Plugin MemberPress Discord Addon versions = 1.1.1...

CVE-2025-2563

The User Registration & Membership WordPress plugin before 4.1.2 does not prevent users to set their account role when the Membership Addon is enabled, leading to a privilege escalation issue and allowing unauthenticated users to gain admin privileges...

CVE-2025-2563

The User Registration & Membership WordPress plugin (versions before 4.1.2 ) contains a critical unauthenticated privilege escalation vulnerability (CVE-2025-2563 ). When the Membership Addon is active, the prepare_members_data() function fails to enforce server-side role restrictions. An attacke...

CVE-2025-2563: Undefined Security Weakness

The User Registration & Membership WordPress plugin before 4.1.2 does not prevent users to set their account role when the Membership Addon is enabled, leading to a privilege escalation issue and allowing unauthenticated users to gain admin privileges...

CVE-2025-22871 vulnerabilities

Vulnerabilities for packages: go-licenses, trino, cargobump, paranoia, wireguard-go, git-credential-oauth, step, aws-flb-cloudwatch, swagger, wuzz, kubernetes-csi-driver-nfs, cadvisor, maru, gostatsd, extism, git-lfs, lvm-driver, rancher-loglevel, secrets-store-csi-driver-provider-aws,...