CVE-2025-53201 WordPress Jobmonster theme <= 4.7.8 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in NooTheme Jobmonster noo-jobmonster allows Reflected XSS.This issue affects Jobmonster: from n/a through = 4.7.8...

CVE-2025-53212

CVE-2025-53212 affects the WordPress plugin Revolution Video Player With Bottom Playlist (versions up to 2.9.2). The issue is a Reflected Cross-Site Scripting (XSS) caused by improper input neutralization during web page generation. Impact is consistent with a reflective XSS vector, with CVSS v3....

CVE-2025-53212 WordPress Revolution Video Player With Bottom Playlist <= 2.9.2 - Cross Site Scripting (XSS) Vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in LambertGroup Revolution Video Player With Bottom Playlist revolution-video-player allows Reflected XSS.This issue affects Revolution Video Player With Bottom Playlist: from n/a through = 2.9.2...

CVE-2025-53212 WordPress Revolution Video Player With Bottom Playlist <= 2.9.2 - Cross Site Scripting (XSS) Vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in LambertGroup Revolution Video Player With Bottom Playlist revolution-video-player allows Reflected XSS.This issue affects Revolution Video Player With Bottom Playlist: from n/a through = 2.9.2...

CVE-2025-53226

CVE-2025-53226 (WordPress Comments Capcha Box) involves a reflected XSS in the Comments Capcha Box plugin for WordPress (versions up to 1.1). Root cause: improper neutralization of input during web page generation, allowing injection of malicious scripts. Impact: client-side script execution coul...

CVE-2025-53319 WordPress Raptive Ads Plugin <= 3.8.0 - Cross Site Scripting (XSS) Vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Raptive Raptive Ads adthrive-ads allows Reflected XSS.This issue affects Raptive Ads: from n/a through = 3.8.0...

CVE-2025-53319 WordPress Raptive Ads Plugin <= 3.8.0 - Cross Site Scripting (XSS) Vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Raptive Raptive Ads adthrive-ads allows Reflected XSS.This issue affects Raptive Ads: from n/a through = 3.8.0...

CVE-2025-53563

CVE-2025-53563 affects the WordPress plugin “Youtube Vimeo Video Player and Slider” (LambertGroup)

CVE-2025-54027 WordPress Support Board <= 3.8.0 - Cross Site Scripting (XSS) Vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Schiocco Support Board supportboard allows Reflected XSS.This issue affects Support Board: from n/a through = 3.8.0...

CVE-2025-54027

CVE-2025-54027 is a reflected XSS in WordPress plugin Support Board (Schiocco) affecting versions up to 3.8.0. The issue arises from improper input neutralization during web page generation, enabling cross-site scripting reflections. CVSS base score is 7.1 (HIGH) with network attack vector, user ...

CVE-2025-54032 WordPress Real Estate Manager Pro Plugin <= 12.7.3 - Cross Site Scripting (XSS) Vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in WebCodingPlace Real Estate Manager Pro allows Reflected XSS. This issue affects Real Estate Manager Pro: from n/a through 12.7.3...

CVE-2025-54044 WordPress Elite Video Player <= 10.0.5 - Cross Site Scripting (XSS) Vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in CreativeMedia Elite Video Player elite-video-player allows Reflected XSS.This issue affects Elite Video Player: from n/a through = 10.0.5...

CVE-2025-54046 WordPress Cost Calculator Plugin <= 7.4 - Cross Site Scripting (XSS) Vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in QuanticaLabs Cost Calculator ql-cost-calculator allows Stored XSS.This issue affects Cost Calculator: from n/a through = 7.4...

CVE-2025-54055

CVE-2025-54055 is a Reflected XSS in WordPress theme Druco (skygroup Druco) up to version 1.5.2, caused by improper input neutralization during web page generation. Affected: Druco (skygroup) WordPress Theme up to 1.5.2. Impact per sources: allow execution of attacker-controlled scripts in the vi...

CVE-2025-54055 WordPress Druco <= 1.5.2 - Cross Site Scripting (XSS) Vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in skygroup Druco druco allows Reflected XSS.This issue affects Druco: from n/a through = 1.5.2...

CVE-2025-54670 WordPress oik Plugin <= 4.15.2 - Cross Site Scripting (XSS) Vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in bobbingwide oik allows Reflected XSS. This issue affects oik: from n/a through 4.15.2...

WordPress plugin WP Emmet 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security...

PT-2025-34017 · Skygroup · Druco

Name of the Vulnerable Software and Affected Versions: skygroup Druco versions through 1.5.2 Description: Improper neutralization of input during web page generation allows reflected cross-site scripting XSS. Recommendations: At the moment, there is no information about a newer version that...

PT-2025-33975 · Unknown · Revolution Video Player With Bottom Playlist

Name of the Vulnerable Software and Affected Versions: Revolution Video Player With Bottom Playlist versions through 2.9.2 Description: This issue involves improper neutralization of input during web page generation, leading to a reflected cross-site scripting XSS condition. Recommendations: Upda...

PT-2025-33953 · Unknown · Dourou Cookie Warning

Name of the Vulnerable Software and Affected Versions: Dourou Cookie Warning versions through 1.3 Description: Improper neutralization of input during web page generation allows for stored cross-site scripting XSS. Recommendations: Update Dourou Cookie Warning to a version later than 1.3...