CVE-2026-22463

CVE-2026-22463 affects WordPress Form to Chat App plugin <= 1.2.5, with a Stored XSS due to improper neutralization of input during web page generation. The issue is described across multiple sources (NVD/Red Hat/ENISA/CVE record) as affecting Form to Chat App: from n/a through

CVE-2026-22347

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in subhansanjaya Carousel Horizontal Posts Content Slider carousel-horizontal-posts-content-slider allows DOM-Based XSS.This issue affects Carousel Horizontal Posts Content Slider: from n/a through =...

CVE-2025-69318

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Hossni Mubarak JobWP jobwp allows Stored XSS.This issue affects JobWP: from n/a through = 2.4.5...

CVE-2025-69318

CVE-2025-69318 concerns the WordPress plugin JobWP – Job Board, Job Listing, Career Page and Recruitment Plugin . The vulnerability is a Stored XSS caused by improper neutralization of input during web page generation. Affected versions are JobWP

CVE-2025-69317

CVE-2025-69317 corresponds to WordPress CarSpot theme before version 2.4.6, with a Reflected XSS vulnerability in the CarSpot theme (scriptsbundle). The issue affects CarSpot:

CVE-2025-69054 WordPress Super Logos Showcase plugin <= 2.8 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in highwarden Super Logos Showcase superlogoshowcase-wp allows Reflected XSS.This issue affects Super Logos Showcase: from n/a through = 2.8...

CVE-2025-68898

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in cjjparadoxmax Synergy Project Manager synergy-project-manager allows Stored XSS.This issue affects Synergy Project Manager: from n/a through = 1.5...

CVE-2025-68884

CVE-2025-68884 affects the WordPress WP Simple Redirect plugin (Arevico WP Simple Redirect)

CVE-2025-68866

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in woofer696 Dinatur dinatur allows Stored XSS.This issue affects Dinatur: from n/a through = 1.18...

CVE-2025-68864 WordPress Infility Global plugin <= 2.15.11 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Infility Infility Global infility-global allows Stored XSS.This issue affects Infility Global: from n/a through = 2.15.11...

CVE-2025-68858

CVE-2025-68858: Reflected Cross-Site Scripting in WordPress plugin wpCAS (

CVE-2025-68835 WordPress Ravpage plugin <= 2.33 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in matiskiba Ravpage ravpage allows Reflected XSS.This issue affects Ravpage: from n/a through = 2.33...

CVE-2025-68520

CVE-2025-68520 refers to a Reflected Cross-Site Scripting (XSS) in the WordPress DotLife theme (DotLife by ThemeGoods). Affected: DotLife versions older than 4.9.5. Root cause per description: improper neutralization of input during web page generation. Impact, as stated in sources, includes pote...

CVE-2025-68520

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in ThemeGoods DotLife dotlife allows Reflected XSS.This issue affects DotLife: from n/a through 4.9.5...

CVE-2025-68518

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in ThemeGoods Hoteller hoteller allows Reflected XSS.This issue affects Hoteller: from n/a through 6.8.9...

CVE-2025-68010

CVE-2025-68010 is a Reflected XSS in the WordPress Netgsm plugin. Affected: Netgsm

CVE-2025-68010

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in netgsm Netgsm netgsm allows Reflected XSS.This issue affects Netgsm: from n/a through = 2.9.63...

CVE-2025-68010 WordPress Netgsm plugin <= 2.9.63 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in netgsm Netgsm netgsm allows Reflected XSS.This issue affects Netgsm: from n/a through = 2.9.63...

CVE-2025-68004

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Kapil Chugh My Post Order my-posts-order allows Reflected XSS.This issue affects My Post Order: from n/a through = 1.2.1.1...

CVE-2025-67960 WordPress WorkScout-Core plugin <= 1.7.06 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in purethemes WorkScout-Core workscout-core allows Reflected XSS.This issue affects WorkScout-Core: from n/a through = 1.7.06...