CVE-2025-23856 WordPress Simple Vertical Timeline plugin <= 0.1 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Odyno Simple Vertical Timeline simple-vertical-timeline allows DOM-Based XSS.This issue affects Simple Vertical Timeline: from n/a through = 0.1...

CVE-2025-23856

CVE-2025-23856 affects the Simple Vertical Timeline plugin. The Red Hat and Wordfence entries confirm an DOM-based XSS caused by improper input neutralization during web page generation. Affected software: Simple Vertical Timeline (version range unspecified in documents; listed up to 0.1). The vu...

CVE-2025-23830 WordPress JB Horizontal Scroller News Ticker plugin <= 1.0 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in jobair JB Horizontal Scroller News Ticker jb-horizontal-scroller-news-ticker allows DOM-Based XSS.This issue affects JB Horizontal Scroller News Ticker: from n/a through = 1.0...

CVE-2025-23830 WordPress JB Horizontal Scroller News Ticker plugin <= 1.0 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in jobair JB Horizontal Scroller News Ticker jb-horizontal-scroller-news-ticker allows DOM-Based XSS.This issue affects JB Horizontal Scroller News Ticker: from n/a through = 1.0...

CVE-2025-23831 WordPress QR Code Generator plugin <= 1.2.6 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in mobstac QR Code Generator qrcode-wprhe allows DOM-Based XSS.This issue affects QR Code Generator: from n/a through = 1.2.6...

CVE-2025-23833 WordPress Links/Problem Reporter plugin <= 2.6.0 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in RaminMT Links/Problem Reporter report-broken-links allows DOM-Based XSS.This issue affects Links/Problem Reporter: from n/a through = 2.6.0...

CVE-2025-23833

CVE-2025-23833 : DOM-Based XSS in WordPress plugin Links/Problem Reporter (RaminMT) due to improper input neutralization during web page generation. Affected versions: Links/Problem Reporter up to 2.6.0 (n/a to 2.6.0). Red Hat advisory reiterates the same description. Public records do not provid...

CVE-2025-23644

CVE-2025-23644 (QuoteMedia Tools) is documented as a Cross-Site Scripting vulnerability in the WordPress plugin QuoteMedia Tools. The CVE description notes a DOM-Based XSS vector, affecting QuoteMedia Tools from n/a through 1.0. The connected Red Hat entry repeats the vulnerability description, w...

CVE-2025-23642

CVE-2025-23642 is a DOM-based XSS in the Sidebar-Content from Shortcode WordPress plugin (Sidebar-Content from Shortcode). Root cause: improper neutralization of input during web page generation. Affected product/component: Sidebar-Content from Shortcode (sidebar-content-from-shortcode) up to ver...

CVE-2025-23641

CVE-2025-23641: DOM-based XSS in Powie’s Powie's pLinks PagePeeker (WordPress plugin) due to improper input neutralization during page generation. Affected: Powie’s pLinks PagePeeker versions up to 1.0.2 (fixed status not publicly detailed in connected docs). CVSSv3.1 base score 6.5 (Medium) with...

CVE-2025-23641 WordPress Powie's pLinks PagePeeker plugin <= 1.0.2 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in PowieT Powie's pLinks PagePeeker plinks allows DOM-Based XSS.This issue affects Powie's pLinks PagePeeker: from n/a through = 1.0.2...

PT-2025-5127

Name of the Vulnerable Software and Affected Versions Jobair JB Horizontal Scroller News Ticker versions 1.0 and earlier Description The issue is related to improper neutralization of input during web page generation, which allows for DOM-Based XSS. This means that an attacker could potentially...

PT-2025-5144

Name of the Vulnerable Software and Affected Versions Alessandro Staniscia Simple Vertical Timeline versions n/a through 0.1 Description The issue is related to improper neutralization of input during web page generation, which allows for DOM-Based XSS. This means that an attacker could potential...

PT-2025-5174 · Unknown · Yet Another Countdown

Name of the Vulnerable Software and Affected Versions: Yet Another Countdown versions n/a through 1.0.1 Description: The issue is related to improper neutralization of input during web page generation, which allows for DOM-Based XSS. This means that an attacker could potentially inject malicious...

PT-2025-4994

Name of the Vulnerable Software and Affected Versions pLinks PagePeeker versions n/a through 1.0.2 Description The issue affects pLinks PagePeeker, allowing DOM-Based XSS due to improper neutralization of input during web page generation. This enables Cross-site Scripting attacks. Recommendations...

PT-2025-5173 · Unknown · Easy Tweet Embed

Name of the Vulnerable Software and Affected Versions: Easy Tweet Embed versions 1.7 and earlier Description: The issue is related to improper neutralization of input during web page generation, also known as 'Cross-site Scripting'. This allows for DOM-Based XSS attacks. Recommendations: For...

PT-2025-5130

Name of the Vulnerable Software and Affected Versions RaminMT Links/Problem Reporter versions n/a through 2.6.0 Description The issue is related to improper neutralization of input during web page generation, which allows for DOM-Based XSS. This means that an attacker could potentially inject...

PT-2025-4997 · Quotemedia · Quotemedia Tools

Name of the Vulnerable Software and Affected Versions: QuoteMedia Tools versions n/a through 1.0 Description: The issue is related to improper neutralization of input during web page generation, which allows for DOM-Based XSS. This is a type of Cross-site Scripting attack. Recommendations: For...

PT-2025-5176

Name of the Vulnerable Software and Affected Versions GMap Shortcode versions prior to 2.0 Description The issue is related to improper neutralization of input during web page generation, which allows DOM-Based XSS. This is a type of Cross-site Scripting attack. Recommendations For versions prior...

PT-2025-5179

Name of the Vulnerable Software and Affected Versions Mindmeister Shortcode versions n/a through 1.0 Description The issue is related to improper neutralization of input during web page generation, also known as 'Cross-site Scripting', which allows DOM-Based XSS in Oncle Tom Mindmeister Shortcode...