CVE-2025-32191

CVE-2025-32191 affects News Element Elementor Blog Magazine (WordPress plugin), with versions up to 1.0.7. The connected document confirms a Stored Cross-Site Scripting (authenticated: Contributor+ required) vulnerability in how input is handled and surfaced in web page content. The core issue is...

CVE-2025-32189 WordPress BWD Elementor Addons plugin <= 4.4.2 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Best WP Developer BWD Elementor Addons bwd-elementor-addons allows DOM-Based XSS.This issue affects BWD Elementor Addons: from n/a through = 4.4.2...

CVE-2025-32170

CVE-2025-32170 concerns the Motors – Car Dealership & Classified Listings WordPress plugin. The Connected Wordfence entry identifies an Authenticated Local File Inclusion (LFI) vulnerability affecting Motors versions up to 1.4.71, with patching applied in 1.4.71. The CVE description in the Initia...

CVE-2025-32126

The CVE CVE-2025-32126 affects the WordPress plugin Pay with Contact Form 7 by cmsMinds. It is an SQL Injection vulnerability caused by improper neutralization of input in SQL commands, affecting versions from n/a up to 1.0.4. The CVSS indicates high impact on confidentiality (C) but no impact on...

CVE-2025-31619

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in marcoingraiti Actionwear products sync actionwear-products-sync allows SQL Injection.This issue affects Actionwear products sync: from n/a through = 2.3.3...

CVE-2025-31552

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in davidfcarr RSVPMarker rsvpmaker allows SQL Injection.This issue affects RSVPMarker : from n/a through = 11.6.7...

CVE-2025-31534

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in shopperdotcom Shopper shopper allows SQL Injection.This issue affects Shopper: from n/a through = 3.2.5...

CVE-2025-31085

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Michel - xiligroup dev xili-language xili-language allows Reflected XSS.This issue affects xili-language: from n/a through = 2.21.2...

CVE-2025-31910

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in reputeinfosystems BookingPress bookingpress-appointment-booking allows SQL Injection.This issue affects BookingPress: from n/a through = 1.1.28...

CVE-2025-31693

Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection' vulnerability in Drupal AI Artificial Intelligence allows OS Command Injection.This issue affects AI Artificial Intelligence: from 0.0.0 before 1.0.5...

CVE-2025-0154

IBM TXSeries for Multiplatforms 9.1 and 11.1 could disclose sensitive information to a remote attacker due to improper neutralization of HTTP headers...

CVE-2025-0154

IBM TXSeries for Multiplatforms (versions 9.1 and 11.1) is affected by CVE-2025-0154 due to improper neutralization of HTTP headers, which could disclose sensitive information to a remote attacker. The issue is documented across multiple sources (NVD entry and IBM security bulletin) indicating th...

CVE-2025-31620

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in carperfer CoverManager covermanager allows Stored XSS.This issue affects CoverManager: from n/a through = 0.0.1...

CVE-2025-31526

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in eleopard Behance Portfolio Manager portfolio-manager-powered-by-behance allows SQL Injection.This issue affects Behance Portfolio Manager: from n/a through = 1.7.5...

CVE-2025-31552 WordPress RSVPMarker plugin <= 11.6.7 - SQL Injection vulnerability

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in davidfcarr RSVPMarker rsvpmaker allows SQL Injection.This issue affects RSVPMarker : from n/a through = 11.6.7...

CVE-2025-31534

CVE-2025-31534 is a SQL Injection flaw in the Shopper (WordPress) plugin affecting the Shopper plugin versions up to 3.2.5. Root cause: improper neutralization of input in SQL commands, enabling unauthenticated attackers to perform injection. Impact per available details: potential unauthorized d...

CVE-2025-31894

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Infoway LLC Ebook Downloader ebook-downloader allows Stored XSS.This issue affects Ebook Downloader: from n/a through = 1.0...

CVE-2025-31793

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in piotnetdotcom Piotnet Forms piotnetforms allows Stored XSS.This issue affects Piotnet Forms: from n/a through = 1.0.30...

CVE-2025-31874 WordPress WebberZone Snippetz plugin <= 2.1.1 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Ajay WebberZone Snippetz add-to-all allows Stored XSS.This issue affects WebberZone Snippetz: from n/a through = 2.1.1...

CVE-2025-31771

CVE-2025-31771: Stored XSS in Team Members for Elementor Page Builder (WordPress plugin) due to improper input neutralization during page generation. Affected: Team Members for Elementor Page Builder