CVE-2025-60124

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Ryan Hellyer Simple Colorbox simple-colorbox allows Stored XSS.This issue affects Simple Colorbox: from n/a through = 1.6.1...

CVE-2025-60177

CVE-2025-60177 describes a Stored XSS in the Recaptcha – wp WordPress plugin. Affected: Recaptcha – wp from n/a through 0.2.6. Root cause: improper neutralization of input during web page generation. Impact per CVSS: Confidentiality/Integrity/Availability Low, but attacker requires High privilege...

CVE-2025-60160

CVE-2025-60160 affects the WordPress plugin Smart Related Products (WooCommerce). The issue is a stored XSS caused by improper input neutralization during web page generation. Affected versions include up to 2.0.6 (initial description lists up to 2.0.5; connected doc shows

CVE-2025-60154 WordPress MWW Disclaimer Buttons plugin <= 3.41 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Jennifer Moss MWW Disclaimer Buttons mww-disclaimer-buttons allows Stored XSS.This issue affects MWW Disclaimer Buttons: from n/a through = 3.41...

CVE-2025-60144 WordPress Lenix scss compiler Plugin <= 1.2 - Cross Site Scripting (XSS) Vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in yonifre Lenix scss compiler lenix-scss-compiler allows Stored XSS.This issue affects Lenix scss compiler: from n/a through = 1.2...

CVE-2025-48107 WordPress Uncode theme < 2.9.4.4 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in undsgn Uncode uncode allows Reflected XSS.This issue affects Uncode: from n/a through 2.9.4.4...

CVE-2025-21056

Improper input validation in Retail Mode prior to version 5.59.4 allows self attackers to execute privileged commands on their own devices...

PT-2025-39592

Name of the Vulnerable Software and Affected Versions Notely versions through 1.8.0 Description The software contains a flaw related to improper input handling during web page generation, which allows for Stored Cross-site Scripting XSS. This means an attacker could potentially inject malicious...

PT-2025-39615

Name of the Vulnerable Software and Affected Versions rozx Recaptcha – wp versions through 0.2.6 Description The software contains a flaw related to improper input handling during web page generation, which allows for Stored Cross-Site Scripting XSS. This means that malicious scripts can be...

PT-2025-39589

Name of the Vulnerable Software and Affected Versions Amit Verma Map Categories to Pages versions through 1.3.2 Description The software contains a flaw due to improper handling of user-supplied data during web page creation, leading to a potential Cross-site Scripting XSS issue. This specific...

WordPress plugin HT Feed 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A cross-site scripting...

PT-2025-39596

Name of the Vulnerable Software and Affected Versions Jennifer Moss MWW Disclaimer Buttons versions through 3.41 Description The software contains a flaw related to improper input handling during web page generation, which allows for Stored Cross-site Scripting XSS. This means that malicious code...

WordPress plugin User Notes 跨站脚本漏洞

WordPress and the WordPress plugin are both products of the WordPress Foundation. WordPress is a blogging platform developed in the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A cross-site scripti...

PT-2025-39600

Name of the Vulnerable Software and Affected Versions webmaniabr Nota Fiscal Eletrônica WooCommerce versions through 3.4.0.6 Description The software contains a flaw due to improper neutralization of input during web page generation, leading to a Cross-site Scripting issue. This allows for Stored...

PT-2025-39578

Name of the Vulnerable Software and Affected Versions DJ-Extensions.com PE Easy Slider versions through 1.1.0 Description The software contains a flaw related to improper handling of user-supplied data during web page creation, which can lead to Stored Cross-site Scripting XSS. This allows an...

PT-2025-39616

Name of the Vulnerable Software and Affected Versions Space Studio Click & Tweet versions through 0.8.9 Description The software contains a flaw related to improper handling of user-supplied data during web page creation, which can lead to Cross-site Scripting XSS. This specific instance is a...

PT-2025-39618

Name of the Vulnerable Software and Affected Versions Terry L. SEO Search Permalink versions through 1.0.3 Description The software contains a flaw related to improper handling of user-supplied data when creating web pages, potentially leading to Stored Cross-site Scripting XSS. This means an...

WordPress plugin SKT Blocks 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A cross-site scripting...

PT-2025-39581

Name of the Vulnerable Software and Affected Versions SKT Blocks versions through 2.5 Description The software contains a flaw related to improper handling of user-supplied data during the creation of web pages, which can lead to Stored Cross-site Scripting XSS. This allows an attacker to inject...

PT-2025-39532

Name of the Vulnerable Software and Affected Versions Quantities and Units for WooCommerce versions through 1.0.13 Description A flaw exists in Nick Verwymeren Quantities and Units for WooCommerce that allows for Stored Cross-site Scripting XSS. This issue arises from improper neutralization of...