CVE-2025-23491

CVE-2025-23491 is a Reflected XSS in the WordPress plugin VSTEMPLATE Creator (author: vikashsrivastava1111989) affecting versions from not specified up to 2.0.2 . The root cause is improper neutralization of input during web page generation , enabling a reflected cross-site scripting attack. The ...

WordPress plugin VSTEMPLATE Creator 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...

A Bootiful Podcast: HTMX creator Carson Gross

Hi, Spring and HTML fans! Today I talk to hypermedia enjoyer Carson Gross, creator of the ever popular HTMX library which eschews a ton of the complexity associated with building client side applications...

CVE-2025-22264

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Patel WP Query Creator wp-query-creator allows Reflected XSS.This issue affects WP Query Creator: from n/a through = 1.0...

CVE-2025-22264 WordPress WP Query Creator plugin <= 1.0 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Patel WP Query Creator wp-query-creator allows Reflected XSS.This issue affects WP Query Creator: from n/a through = 1.0...

WordPress plugin WP Query Creator 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripti...

PT-2025-4402 · Tarak Patel · Wp Query Creator

Name of the Vulnerable Software and Affected Versions: Tarak Patel WP Query Creator versions 1.0 and earlier Description: The issue is related to improper neutralization of input during web page generation, which allows reflected Cross-site Scripting XSS. This enables attackers to inject maliciou...

CVE-2025-23643

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in a.ankit ReadMe Creator readme-creator allows Reflected XSS.This issue affects ReadMe Creator: from n/a through = 1.0...

CVE-2025-23643

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in a.ankit ReadMe Creator readme-creator allows Reflected XSS.This issue affects ReadMe Creator: from n/a through = 1.0...

CVE-2025-23643 WordPress ReadMe Creator plugin <= 1.0 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in NotFound ReadMe Creator allows Reflected XSS. This issue affects ReadMe Creator: from n/a through 1.0...

CVE-2025-23643 WordPress ReadMe Creator plugin <= 1.0 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in a.ankit ReadMe Creator readme-creator allows Reflected XSS.This issue affects ReadMe Creator: from n/a through = 1.0...

CVE-2025-23643

CVE-2025-23643 : The connected Red Hat/WordPress data confirms a Reflected Cross-Site Scripting issue in the WordPress plugin “ReadMe Creator” (NotFound ReadMe Creator). The vulnerability arises from improper input neutralization during web page generation, affecting the ReadMe Creator extension ...

CVE-2025-23603 WordPress Group category creator plugin <= 1.3.0.3 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in MohammadJafar Khajeh Group category creator group-category-creator allows Reflected XSS.This issue affects Group category creator: from n/a through = 1.3.0.3...

CVE-2025-23603

CVE-2025-23603 : Reflected Cross-Site Scripting in the WordPress plugin Group category creator (NotFound Group category creator) allows injection via improper neutralization of input during web page generation. Affected versions include up to 1.3.0.3 (from the description). The vulnerability is d...

WordPress plugin Group category creator 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...

WordPress plugin ReadMe Creator 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...

PT-2025-4967 · Unknown · Notfound Group Category Creator

Name of the Vulnerable Software and Affected Versions: NotFound Group category creator versions 1.3.0.3 and earlier Description: The issue is related to improper neutralization of input during web page generation, also known as 'Cross-site Scripting', which allows Reflected XSS. This problem...

WordPress WP Query Creator plugin <= 1.0 - Reflected Cross Site Scripting (XSS) vulnerability

Reflected Cross Site Scripting XSS vulnerability discovered by SOPROBRO Patchstack Alliance in WordPress Plugin WP Query Creator versions = 1.0...

WordPress Custom Widget Creator plugin <= 1.0.5 - Reflected Cross Site Scripting (XSS) vulnerability

Reflected Cross Site Scripting XSS vulnerability discovered by Le Ngoc Anh in WordPress Plugin Custom Widget Creator versions = 1.0.5...

WordPress ReadMe Creator plugin <= 1.0 - Reflected Cross Site Scripting (XSS) vulnerability

Reflected Cross Site Scripting XSS vulnerability discovered by João Pedro Soares de Alcântara Kinorth in WordPress Plugin ReadMe Creator versions = 1.0...