CVE-2025-22522

CVE-2025-22522 affects the WordPress SingSong plugin. The vulnerability is a Stored XSS caused by improper input handling during web page generation (stored cross-site scripting). Affected range is SingSong: from n/a through 1.2, per the CVE description. The connected Red Hat/Wordfence entries co...

CVE-2025-22538 WordPress Virtual Bot Plugin <= 1.0.0 - CSRF Cross Site Scripting (XSS) vulnerability

Cross-Site Request Forgery CSRF vulnerability in Ofek Nakar Virtual Bot virtual-bot allows Stored XSS.This issue affects Virtual Bot: from n/a through = 1.0.0...

CVE-2025-22547 WordPress JK Html To Pdf plugin <= 1.0.0 - CSRF to Stored XSS vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Jay Krishnan G JK Html To Pdf allows Stored XSS.This issue affects JK Html To Pdf: from n/a through 1.0.0...

CVE-2025-22548 WordPress ldap_login_password_and_role_manager plugin <= 1.0.12 - CSRF to Stored XSS vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in frankkoenen ldaploginpasswordandrolemanager ldap-login-password-and-role-manager allows Stored XSS.This issue affects ldaploginpasswordandrolemanager: from n/a through = 1.0.12...

CVE-2025-22548

CVE-2025-22548 is a Stored XSS in the ldap_login_password_and_role_manager WordPress plugin. Affected component/issue: improper neutralization during web page generation; vulnerable from n/a to version 1.0.12. Impact per available data: Stored Cross‑Site Scripting risk. Connected documents contai...

CVE-2025-22548 WordPress ldap_login_password_and_role_manager plugin <= 1.0.12 - CSRF to Stored XSS vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Frank Koenen ldaploginpasswordandrolemanager allows Stored XSS.This issue affects ldaploginpasswordandrolemanager: from n/a through 1.0.12...

CVE-2025-22552 WordPress Affiliate Disclosure Statement plugin <= 0.3 - CSRF to Stored XSS vulnerability

Cross-Site Request Forgery CSRF vulnerability in Jason Keeley, Bryan Nielsen Affiliate Disclosure Statement allows Cross Site Request Forgery.This issue affects Affiliate Disclosure Statement: from n/a through 0.3...

CVE-2025-22552 WordPress Affiliate Disclosure Statement plugin <= 0.3 - CSRF to Stored XSS vulnerability

Cross-Site Request Forgery CSRF vulnerability in bnielsen Affiliate Disclosure Statement affiliate-disclosure-statement allows Cross Site Request Forgery.This issue affects Affiliate Disclosure Statement: from n/a through = 0.3...

CVE-2025-22556

CVE-2025-22556 is a Cross-Site Request Forgery (CSRF) vulnerability in the Norse Rune Oracle Plugin for WordPress. Affected is the Norse Rune Oracle Plugin 1.4.1 and earlier (the description lists vulnerability impact as affecting the plugin from n/a through 1.4.1). The CVSS metrics provided by P...

CVE-2025-22555 WordPress Smoothness Slider Shortcode plugin <= v1.2.2 - CSRF to Stored XSS vulnerability

Cross-Site Request Forgery CSRF vulnerability in Noel Jarencio. Smoothness Slider Shortcode allows Cross Site Request Forgery.This issue affects Smoothness Slider Shortcode: from n/a through v1.2.2...

CVE-2025-22559 WordPress TubePress.NET Plugin <= 4.0.1 - CSRF to Stored XSS vulnerability

Cross-Site Request Forgery CSRF vulnerability in tubepress TubePress.NET tubepressnet allows Cross Site Request Forgery.This issue affects TubePress.NET: from n/a through = 4.0.1...

CVE-2025-22559

CVE-2025-22559 : TubePress.NET suffers a Cross-Site Request Forgery (CSRF) issue up to version 4.0.1 that can lead to Stored Cross-Site Scripting (XSS). The linked Wordfence/mitigation data confirms the vulnerability class and affected scope but does not provide exploit steps, affected plugin dep...

CVE-2025-22571 WordPress Instabot plugin <= 1.10 - CSRF to Stored XSS vulnerability

Cross-Site Request Forgery CSRF vulnerability in Instabot Instabot allows Cross Site Request Forgery.This issue affects Instabot: from n/a through 1.10...

CVE-2025-22582 WordPress Uptime Robot plugin <= 0.1.3 - CSRF to Stored XSS vulnerability

Cross-Site Request Forgery CSRF vulnerability in Scott Nellé Uptime Robot allows Stored XSS.This issue affects Uptime Robot: from n/a through 0.1.3...

CVE-2025-22582

CVE-2025-22582 is a CSRF-to-Stored-XSS vulnerability in the Uptime Robot WordPress plugin (Scott Nellé) affecting versions from n/a up to 0.1.3. The Connected Red Hat doc reiterates the CSRF/Stored XSS description; no exploitation details are provided. CVSS v3.1 base score is 7.1 (HIGH). No patch...

CVE-2025-22589

CVE-2025-22589 affects the Quote Tweet plugin (bozdoz Quote Tweet) for WordPress. The issue is a CSRF in the quote-tweet component that enables Stored XSS (affecting versions from n/a through ≤ 0.7). The CVSS 3.1 score is 7.1 (HIGH) with network attack vector, low confidentiality/integrity/availa...

CVE-2025-22589 WordPress Quote Tweet plugin <= 0.7 - CSRF to Stored XSS vulnerability

Cross-Site Request Forgery CSRF vulnerability in bozdoz Quote Tweet quote-tweet allows Stored XSS.This issue affects Quote Tweet: from n/a through = 0.7...

CVE-2025-22590

CVE-2025-22590 describes a CSRF-induced Stored XSS in Prayer Times Anywhere (mmrs151 prayer-times-anywhere) for versions up to and including 2.0.1. The initial description notes the attacker can induce cross-site requests to cause stored cross-site scripting, but the documents do not provide conc...

CVE-2025-22593

CVE-2025-22593 affects Laika Pedigree Tree (

CVE-2025-22593 WordPress Laika Pedigree Tree plugin <= 1.4 - CSRF to Stored XSS vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in burria Laika Pedigree Tree laika-pedigree-tree allows Stored XSS.This issue affects Laika Pedigree Tree: from n/a through = 1.4...