CVE-2025-31543

CVE-2025-31543 is a DOM-based Cross-Site Scripting vulnerability in the WordPress plugin Twice Commerce . The description specifies improper input neutralization during web page generation, enabling DOM-level XSS. Affected software is listed as “Twice Commerce: from n/a through 1.3.1,” indicating...

CVE-2025-31535

CVE-2025-31535 affects Simple Owl Carousel (WordPress plugin) with a DOM-based XSS due to improper input neutralization during web page generation. Affected versions: 1.1.1 and earlier (n/a through 1.1.1). Exploitation details are not provided in the supplied documents. CVSS v3.1 base score is 6....

CVE-2025-31419

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Themeix Churel allows DOM-Based XSS.This issue affects Churel: from n/a through 1.0.8...

CVE-2025-31419

CVE-2025-31419 is a DOM-based XSS in the WordPress theme Churel (Themeix), affecting versions up to 1.0.8. The vulnerability is a Cross-Site Scripting flaw caused by improper input neutralization during web page generation. Impact is rated low for confidentiality, integrity, and availability (per...

CVE-2025-31419 WordPress Churel plugin <= 1.0.8 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Themeix Churel allows DOM-Based XSS.This issue affects Churel: from n/a through 1.0.8...

CVE-2025-30963 WordPress JetSmartFilters plugin <= 3.6.3 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Crocoblock JetSmartFilters jet-smart-filters allows DOM-Based XSS.This issue affects JetSmartFilters: from n/a through = 3.6.3...

CVE-2025-30961

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in tinuzz Trackserver trackserver allows DOM-Based XSS.This issue affects Trackserver: from n/a through = 5.1.0...

CVE-2025-30961

CVE-2025-30961 affects the Trackserver plugin (tinuzz Trackserver) for WordPress. It is a Cross-Site Scripting vulnerability (DOM-based/Stored per sources) arising from improper neutralization of input during web page generation, enabling script execution. The WordPress vulnerability listing indi...

CVE-2025-30961 WordPress Trackserver plugin <= 5.1.0 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in tinuzz Trackserver trackserver allows DOM-Based XSS.This issue affects Trackserver: from n/a through = 5.1.0...

CVE-2025-31412

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Crocoblock JetProductGallery jet-woo-product-gallery allows DOM-Based XSS.This issue affects JetProductGallery: from n/a through = 2.1.22...

CVE-2025-31043

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Crocoblock JetSearch jet-search allows DOM-Based XSS.This issue affects JetSearch: from n/a through = 3.5.7...

CVE-2025-31412

JetProductGallery (JetProductGallery) plugin for WordPress has a DOM-based XSS (CVE-2025-31412) affecting versions up to 2.1.22. Exploitation requires authentication (Contributor+). Patch available in 2.1.22; upgrade to 2.1.22 or later to remediate. This aligns with linked Wordfence details indic...

CVE-2025-31043 WordPress JetSearch plugin <= 3.5.7 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in NotFound JetSearch allows DOM-Based XSS. This issue affects JetSearch: from n/a through 3.5.7...

CVE-2025-31043

CVE-2025-31043 : JetSearch (WordPress plugin) has a DOM-based cross-site scripting (XSS) vulnerability in the JetSearch component due to improper input handling during web page generation. Affected: JetSearch versions up to 3.5.7 (requires authenticated access at Contributor+ level). Impact: stor...

WordPress plugin Caspio Bridge Custom Database Applications by Caspio 跨站脚本漏洞

WordPress and WordPress plugin are products of the WordPress Foundation, a blogging platform developed in PHP. WordPress plugin is an application plugin that supports personal blog sites on PHP and MySQL servers. A cross-site scripting vulnerability exists in WordPress plugin Caspio Bridge Custom...

CVE-2025-31077

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Ultimate Blocks Ultimate Blocks ultimate-blocks allows DOM-Based XSS.This issue affects Ultimate Blocks: from n/a through = 3.2.7...

CVE-2025-31093

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in redpixelstudios RPS Include Content rps-include-content allows DOM-Based XSS.This issue affects RPS Include Content: from n/a through = 1.2.1...

CVE-2025-31096

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in WPXPO PostX ultimate-post allows DOM-Based XSS.This issue affects PostX: from n/a through = 4.1.25...

CVE-2025-22660

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Wolfgang Include Mastodon Feed include-mastodon-feed allows DOM-Based XSS.This issue affects Include Mastodon Feed: from n/a through = 1.9.9...

CVE-2025-22816

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in codetrendy Power Mag power-mag allows DOM-Based XSS.This issue affects Power Mag: from n/a through = 1.1.5...