CVE-2025-47497

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Themepoints Logo Showcase logo-showcase allows DOM-Based XSS.This issue affects Logo Showcase: from n/a through = 3.0.4...

CVE-2025-47501

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Daniel Iser Content Control content-control allows DOM-Based XSS.This issue affects Content Control: from n/a through = 2.6.1...

CVE-2025-47493

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Ultimate Blocks Ultimate Blocks ultimate-blocks allows DOM-Based XSS.This issue affects Ultimate Blocks: from n/a through = 3.2.9...

CVE-2025-47488

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in boldthemes Bold Page Builder bold-page-builder allows DOM-Based XSS.This issue affects Bold Page Builder: from n/a through = 5.3.2...

CVE-2025-47476

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in add-ons.org Cost Calculator for Elementor cost-calculator-for-elementor allows DOM-Based XSS.This issue affects Cost Calculator for Elementor: from n/a through = 1.3.3...

CVE-2025-47679

CVE-2025-47679 affects RS WP Book Showcase (WordPress plugin) up to version 6.7.40. The issue is described as an improper neutralization of input during web page generation, resulting in a DOM-based XSS vulnerability. The initial entry lists a CVSS v3.1 base score of 6.5 (Medium) with network att...

CVE-2025-47679 WordPress RS WP Book Showcase plugin <= 6.7.59 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in RS WP THEMES RS WP Book Showcase rs-wp-books-showcase allows DOM-Based XSS.This issue affects RS WP Book Showcase: from n/a through = 6.7.59...

CVE-2025-47675

CVE-2025-47675 refers to a DOM-based Cross-Site Scripting vulnerability in the WordPress plugin Woobox . The issue is described as an improper neutralization of input during web page generation, enabling DOM-based XSS. Affected versions are stated as n/a through 1.6 ; exploitation status and conc...

CVE-2025-47675 WordPress Woobox <= 1.6 - Cross Site Scripting (XSS) Vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in woobox Woobox allows DOM-Based XSS. This issue affects Woobox: from n/a through 1.6...

CVE-2025-47675 WordPress Woobox plugin <= 1.6 - Cross Site Scripting (XSS) Vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in woobox Woobox woobox allows DOM-Based XSS.This issue affects Woobox: from n/a through = 1.6...

CVE-2025-47669 WordPress CBX Map for Google Map & OpenStreetMap plugin <= 1.1.12 - Cross Site Scripting (XSS) Vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Sabuj Kundu CBX Map for Google Map & OpenStreetMap cbxgooglemap allows DOM-Based XSS.This issue affects CBX Map for Google Map & OpenStreetMap: from n/a through = 1.1.12...

CVE-2025-47669

CVE-2025-47669 affects the WordPress plugin CBX Map for Google Map & OpenStreetMap (versions 1.1.12 and earlier). The issue is a DOM-based XSS caused by improper input neutralization during web page generation. Affected product: CBX Map for Google Map & OpenStreetMap. Impact per provided data: Cr...

CVE-2025-47626 WordPress Submission DOM tracking for Contact Form 7 plugin <= 2.1 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in apasionados Submission DOM tracking for Contact Form 7 cf7-submission-dom-tracking allows Stored XSS.This issue affects Submission DOM tracking for Contact Form 7: from n/a through = 2.1...

CVE-2025-47626

CVE-2025-47626 documents a Stored XSS in the WordPress plugin Submission DOM tracking for Contact Form 7. The available connected sources note the issue as Cross Site Scripting due to improper input neutralization during web page generation, affecting Submission DOM tracking for Contact Form 7 ve...

CVE-2025-47589

CVE-2025-47589: WordPress Ebook Store (versions n/a–5.8007) exhibits a DOM-based XSS due to improper input neutralization during web page generation. The Wordfence Vulnerability database lists this as Unpatched, with no explicit fix/version provided in the connected documents. A patch or updated ...

CVE-2025-47589 WordPress Ebook Store <= 5.8007 - Cross Site Scripting (XSS) Vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in motov.net Ebook Store allows DOM-Based XSS. This issue affects Ebook Store: from n/a through 5.8007...

CVE-2025-47589 WordPress Ebook Store plugin <= 5.8009 - Cross Site Scripting (XSS) Vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in motov.net Ebook Store ebook-store allows DOM-Based XSS.This issue affects Ebook Store: from n/a through = 5.8009...

CVE-2025-47515 WordPress WP DPE-GES <= 1.6 - Cross Site Scripting (XSS) Vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Seb WP DPE-GES allows DOM-Based XSS. This issue affects WP DPE-GES: from n/a through 1.6...

CVE-2025-47515

CVE-2025-47515 affects the WP DPE-GES WordPress plugin (Seb WP DPE-GES) with DOM-based XSS due to improper input neutralization during web page generation; affected versions are up to 1.6. A patch/fixed version exists; upgrade to the fixed version as remediation. Exploit status is not provided in...

CVE-2025-47515 WordPress WP DPE-GES plugin <= 1.6 - Cross Site Scripting (XSS) Vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Seb WP DPE-GES wp-dpe-ges allows DOM-Based XSS.This issue affects WP DPE-GES: from n/a through = 1.6...