4610 matches found
CVE-2025-46447 WordPress Fable Extra plugin <= 1.0.6 - Cross Site Scripting (XSS) Vulnerability
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in WPFable Fable Extra fable-extra allows DOM-Based XSS.This issue affects Fable Extra: from n/a through = 1.0.6...
CVE-2025-46447
CVE-2025-46447 describes a DOM-based XSS in the WordPress plugin Fable Extra (versions up to 1.0.6). The issue arises from improper input neutralization during web page generation, enabling cross-site scripting through the affected plugin’s rendering path. Public references identify Fable Extra
CVE-2025-46447 WordPress Fable Extra <= 1.0.6 - Cross Site Scripting (XSS) Vulnerability
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in WPFable Fable Extra allows DOM-Based XSS. This issue affects Fable Extra: from n/a through 1.0.6...
CVE-2025-46483 WordPress Peadig’s Google +1 Button plugin <= 0.1.2 - Cross Site Scripting (XSS) Vulnerability
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Alex Moss Peadig’s Google +1 Button google-1 allows DOM-Based XSS.This issue affects Peadig’s Google +1 Button: from n/a through = 0.1.2...
CVE-2025-46483
Summary (CVE-2025-46483) A DOM-based XSS in Peadig’s Google +1 Button (WordPress plugin “Peadig’s Google +1 Button”) is caused by improper neutralization of input during web page generation. Affected versions are listed as n/a through 0.1.2. Multiple connected sources corroborate the same vulnera...
CVE-2025-46479
The CVE-2025-46479 entry concerns a DOM-based XSS in the WordPress BBCode Deluxe plugin. Affected versions are BBCode Deluxe up to 2020.08.01.2, with the root cause described as improper input neutralization during web page generation. The CVSS vector provided (AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L...
CVE-2025-46475 WordPress Able Player plugin <= 1.2.1 - Cross Site Scripting (XSS) Vulnerability
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Joe Dolson Able Player ableplayer allows DOM-Based XSS.This issue affects Able Player: from n/a through = 1.2.1...
CVE-2025-46475 WordPress Able Player plugin <= 1.2.1 - Cross Site Scripting (XSS) Vulnerability
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Joe Dolson Able Player ableplayer allows DOM-Based XSS.This issue affects Able Player: from n/a through = 1.2.1...
CVE-2025-46475
CVE-2025-46475 affects Able Player (WordPress plugin) versions <= 1.2.1. The issue is a DOM-based XSS caused by improper neutralization of input during web page generation. Patchstack and related sources indicate the vulnerability has been patched for Able Player
CVE-2025-46471 WordPress WP Custom Post Popup plugin <= 1.0.1 - Cross Site Scripting (XSS) Vulnerability
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in gnanavelshenll WP Custom Post Popup custom-post-popup allows DOM-Based XSS.This issue affects WP Custom Post Popup: from n/a through = 1.0.1...
CVE-2025-46471 WordPress WP Custom Post Popup plugin <= 1.0.1 - Cross Site Scripting (XSS) Vulnerability
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in gnanavelshenll WP Custom Post Popup custom-post-popup allows DOM-Based XSS.This issue affects WP Custom Post Popup: from n/a through = 1.0.1...
CVE-2025-46471
CVE-2025-46471 affects the WordPress plugin WP Custom Post Popup. The vulnerability is a DOM-based XSS due to improper input neutralization in the plugin’s web page generation, impacting version range from n/a through 1.0.1. Exploitation details are not provided in the initial document, and no of...
CVE-2025-46467
The CVE-2025-46467 entry covers the WordPress RAphicon plugin (Rahendra Putra K) with a DOM-based XSS vulnerability due to improper input neutralization during web page generation. Affected versions are n/a through 2.1.2. The connected sources confirm the existence of a Cross-Site Scripting issue...
CVE-2025-46467 WordPress RAphicon plugin <= 2.1.2 - Cross Site Scripting (XSS) Vulnerability
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Rahendra Putra K™ RAphicon raphicon allows DOM-Based XSS.This issue affects RAphicon: from n/a through = 2.1.2...
CVE-2025-46461 WordPress RRSSB plugin <= 1.0.1 - Cross Site Scripting (XSS) Vulnerability
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Relentless Apps RRSSB rrssb allows DOM-Based XSS.This issue affects RRSSB: from n/a through = 1.0.1...
CVE-2025-46461
CVE-2025-46461 affects Relentless Apps RRSSB WordPress plugin (
CVE-2025-46538 WordPress Inline Text Popup plugin <= 1.0.0 - Cross Site Scripting (XSS) Vulnerability
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in webplanetsoft Inline Text Popup inline-text-popup allows DOM-Based XSS.This issue affects Inline Text Popup: from n/a through = 1.0.0...
CVE-2025-46538
CVE-2025-46538 – WordPress Inline Text Popup (webplanetsoft) is a DOM-based cross-site scripting vulnerability affecting Inline Text Popup versions up to 1.0.0. The issue arises from improper input neutralization during web page generation, enabling XSS. Public details in the initial document ide...
CVE-2025-46538 WordPress Inline Text Popup <= 1.0.0 - Cross Site Scripting (XSS) Vulnerability
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in webplanetsoft Inline Text Popup allows DOM-Based XSS. This issue affects Inline Text Popup: from n/a through 1.0.0...
CVE-2025-46536 WordPress Carousel-of-post-images plugin <= 1.07 - Cross Site Scripting (XSS) Vulnerability
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in RichardHarrison Carousel-of-post-images carousel-of-post-images allows DOM-Based XSS.This issue affects Carousel-of-post-images: from n/a through = 1.07...