CVE-2025-54747

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in wpbakery Templatera templatera allows DOM-Based XSS.This issue affects Templatera: from n/a through = 2.3.0...

CVE-2025-52771 WordPress Video Expander Plugin <= 1.0 - Cross Site Scripting (XSS) Vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in bcupham Video Expander video-expander allows Stored XSS.This issue affects Video Expander: from n/a through = 1.0...

CVE-2025-53330

CVE-2025-53330 : WP Rentals WordPress theme (up to 3.13.1) has stored XSS due to improper input neutralization during web page generation. This can enable cross-site scripting within affected sites using the WP Rentals theme. Remediation: upgrade to a fixed version (Patchstack lists 3.16.1 as the...

CVE-2025-53342

CVE-2025-53342 is a stored XSS vulnerability in GoodLayers Modernize theme (affected: versions up to and including 3.4.0). The issue arises from improper neutralization of input during web page generation, enabling stored cross-site scripting. Public sources in the connected documents corroborate...

CVE-2025-53342 WordPress Modernize Theme <= 3.4.0 - Cross Site Scripting (XSS) Vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in GoodLayers Modernize modernize allows Stored XSS.This issue affects Modernize: from n/a through = 3.4.0...

CVE-2025-53582 WordPress WordLift Plugin <= 3.54.5 - Cross Site Scripting (XSS) Vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in WordLift WordLift wordlift allows Stored XSS.This issue affects WordLift: from n/a through = 3.54.5...

CVE-2025-53582 WordPress WordLift Plugin <= 3.54.5 - Cross Site Scripting (XSS) Vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in WordLift WordLift wordlift allows Stored XSS.This issue affects WordLift: from n/a through = 3.54.5...

CVE-2025-54054

CVE-2025-54054 : WordPress plugin “12 Step Meeting List” is affected by a Stored XSS due to improper input neutralization during web page generation. Affected versions are 12 Step Meeting List up to 3.18.3. Connected sources confirm this as a real vulnerability entry and indicate a patch exists; ...

CVE-2025-54708 WordPress B Blocks Plugin <= 2.0.5 - Cross Site Scripting (XSS) Vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in bPlugins B Blocks b-blocks allows DOM-Based XSS.This issue affects B Blocks: from n/a through = 2.0.5...

CVE-2025-54708

The CVE-2025-54708 entry concerns the WordPress plugin B Blocks (bPlugins B Blocks) with versions up to and including 2.0.5. The connected sources confirm a DOM-based Cross-Site Scripting (XSS) vulnerability caused by improper neutralization of input during web page generation, allowing execution...

CVE-2025-54708 WordPress B Blocks Plugin <= 2.0.5 - Cross Site Scripting (XSS) Vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in bPlugins B Blocks b-blocks allows DOM-Based XSS.This issue affects B Blocks: from n/a through = 2.0.5...

CVE-2025-54729

CVE-2025-54729 refers to a stored Cross‑Site Scripting (XSS) vulnerability in the WordPress plugin Webba Booking (Lite) up to version 6.0.5 . The issue arises from improper input neutralization during web page generation, enabling stored XSS when data is rendered. Public records from NVD, CVE‑Lis...

CVE-2025-54740

CVE-2025-54740 concerns the WordPress plugin Print My Blog (versions up to 3.27.9) and is a stored XSS vulnerability arising from improper input neutralization during web page generation. Exploitation context details in the connected sources confirm the vulnerability is tied to the plugin’s handl...

CVE-2025-54740 WordPress Print My Blog Plugin <= 3.27.9 - Cross Site Scripting (XSS) Vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Michael Nelson Print My Blog print-my-blog allows Stored XSS.This issue affects Print My Blog: from n/a through = 3.27.9...

CVE-2025-54747 WordPress Templatera Plugin <= 2.3.0 - Cross Site Scripting (XSS) Vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in wpbakery Templatera allows DOM-Based XSS. This issue affects Templatera: from n/a through 2.3.0...

CVE-2025-55714

CVE-2025-55714 is a stored XSS in Crocoblock JetElements for Elementor (JetElements) up to version 2.7.9. The issue arises from improper neutralization of input during web page generation, enabling stored cross-site scripting. Affected product: JetElements for Elementor (WordPress plugin). Root c...

CVE-2025-54687

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Crocoblock JetTabs jet-tabs allows DOM-Based XSS.This issue affects JetTabs: from n/a through = 2.2.9.1...

CVE-2025-54688

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Crocoblock JetEngine jet-engine allows Stored XSS.This issue affects JetEngine: from n/a through = 3.7.1.2...

CVE-2025-49038

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Soflyy WP Dynamic Links wp-dynamic-links allows Reflected XSS.This issue affects WP Dynamic Links: from n/a through = 1.0.1...

CVE-2025-54707 WordPress MDTF Plugin <= 1.3.3.7 - SQL Injection Vulnerability

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in RealMag777 MDTF wp-meta-data-filter-and-taxonomy-filter allows SQL Injection.This issue affects MDTF: from n/a through = 1.3.3.7...