CVE-2025-46479

The CVE-2025-46479 entry concerns a DOM-based XSS in the WordPress BBCode Deluxe plugin. Affected versions are BBCode Deluxe up to 2020.08.01.2, with the root cause described as improper input neutralization during web page generation. The CVSS vector provided (AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L...

CVE-2025-46483

Summary (CVE-2025-46483) A DOM-based XSS in Peadig’s Google +1 Button (WordPress plugin “Peadig’s Google +1 Button”) is caused by improper neutralization of input during web page generation. Affected versions are listed as n/a through 0.1.2. Multiple connected sources corroborate the same vulnera...

CVE-2025-46471 WordPress WP Custom Post Popup plugin <= 1.0.1 - Cross Site Scripting (XSS) Vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in gnanavelshenll WP Custom Post Popup custom-post-popup allows DOM-Based XSS.This issue affects WP Custom Post Popup: from n/a through = 1.0.1...

CVE-2025-46475

CVE-2025-46475 affects Able Player (WordPress plugin) versions &lt;= 1.2.1. The issue is a DOM-based XSS caused by improper neutralization of input during web page generation. Patchstack and related sources indicate the vulnerability has been patched for Able Player

CVE-2025-46475 WordPress Able Player plugin <= 1.2.1 - Cross Site Scripting (XSS) Vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Joe Dolson Able Player ableplayer allows DOM-Based XSS.This issue affects Able Player: from n/a through = 1.2.1...

CVE-2025-46471 WordPress WP Custom Post Popup plugin <= 1.0.1 - Cross Site Scripting (XSS) Vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in gnanavelshenll WP Custom Post Popup custom-post-popup allows DOM-Based XSS.This issue affects WP Custom Post Popup: from n/a through = 1.0.1...

CVE-2025-46475 WordPress Able Player plugin <= 1.2.1 - Cross Site Scripting (XSS) Vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Joe Dolson Able Player ableplayer allows DOM-Based XSS.This issue affects Able Player: from n/a through = 1.2.1...

CVE-2025-46471

CVE-2025-46471 affects the WordPress plugin WP Custom Post Popup. The vulnerability is a DOM-based XSS due to improper input neutralization in the plugin’s web page generation, impacting version range from n/a through 1.0.1. Exploitation details are not provided in the initial document, and no of...

CVE-2025-46467 WordPress RAphicon plugin <= 2.1.2 - Cross Site Scripting (XSS) Vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Rahendra Putra K™ RAphicon raphicon allows DOM-Based XSS.This issue affects RAphicon: from n/a through = 2.1.2...

CVE-2025-46467

The CVE-2025-46467 entry covers the WordPress RAphicon plugin (Rahendra Putra K) with a DOM-based XSS vulnerability due to improper input neutralization during web page generation. Affected versions are n/a through 2.1.2. The connected sources confirm the existence of a Cross-Site Scripting issue...

CVE-2025-46461

CVE-2025-46461 affects Relentless Apps RRSSB WordPress plugin (

CVE-2025-46461 WordPress RRSSB plugin <= 1.0.1 - Cross Site Scripting (XSS) Vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Relentless Apps RRSSB rrssb allows DOM-Based XSS.This issue affects RRSSB: from n/a through = 1.0.1...

CVE-2025-46538

CVE-2025-46538 – WordPress Inline Text Popup (webplanetsoft) is a DOM-based cross-site scripting vulnerability affecting Inline Text Popup versions up to 1.0.0. The issue arises from improper input neutralization during web page generation, enabling XSS. Public details in the initial document ide...

CVE-2025-46538 WordPress Inline Text Popup <= 1.0.0 - Cross Site Scripting (XSS) Vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in webplanetsoft Inline Text Popup allows DOM-Based XSS. This issue affects Inline Text Popup: from n/a through 1.0.0...

CVE-2025-46538 WordPress Inline Text Popup plugin <= 1.0.0 - Cross Site Scripting (XSS) Vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in webplanetsoft Inline Text Popup inline-text-popup allows DOM-Based XSS.This issue affects Inline Text Popup: from n/a through = 1.0.0...

CVE-2025-46536 WordPress Carousel-of-post-images plugin <= 1.07 - Cross Site Scripting (XSS) Vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in RichardHarrison Carousel-of-post-images carousel-of-post-images allows DOM-Based XSS.This issue affects Carousel-of-post-images: from n/a through = 1.07...

CVE-2025-46536 WordPress Carousel-of-post-images plugin <= 1.07 - Cross Site Scripting (XSS) Vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in RichardHarrison Carousel-of-post-images carousel-of-post-images allows DOM-Based XSS.This issue affects Carousel-of-post-images: from n/a through = 1.07...

CVE-2025-46536

CVE-2025-46536 affects the WordPress plugin Carousel-of-post-images up to version 1.07, caused by improper input neutralization during web page generation, enabling DOM-based XSS. Public details in initial and connected sources confirm the affected software and XSS nature; no patched version is c...

CVE-2025-46534

CVE-2025-46534 covers a DOM-based XSS in the WordPress plugin Image Style Hover (DanielRiera) caused by improper input neutralization during web page generation. Affected versions are reported as

CVE-2025-46534 WordPress Image Style Hover <= 1.0.6 - Cross Site Scripting (XSS) Vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in DanielRiera Image Style Hover allows DOM-Based XSS. This issue affects Image Style Hover: from n/a through 1.0.6...