6439 matches found
CVE-2025-47487
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Moreconvert Team MC Woocommerce Wishlist smart-wishlist-for-more-convert allows Reflected XSS.This issue affects MC Woocommerce Wishlist: from n/a through = 1.9.1...
CVE-2025-31925
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in LambertGroup SHOUT lbg-audio8-html5-radioads allows Reflected XSS.This issue affects SHOUT: from n/a through = 3.5.3...
CVE-2025-32305
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Sneeit WordPress FlatNews Theme flatnews allows Reflected XSS.This issue affects WordPress FlatNews Theme: from n/a through = 5.8...
CVE-2025-31426
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in LambertGroup Sticky Radio Player lbg-audio5-html5-shoutcaststicky allows Reflected XSS.This issue affects Sticky Radio Player: from n/a through = 3.4...
CVE-2025-31058
CVE-2025-31058 affects the Revolution Video Player WordPress plugin (up to version 2.9.2). The issue is an Reflected Cross-Site Scripting (XSS) caused by improper input neutralization during web page generation, enabling an attacker to inject scripts that execute in a victim’s browser. The CVSS 3...
CVE-2025-31925 WordPress SHOUT plugin <= 3.5.3 - Reflected Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in LambertGroup SHOUT lbg-audio8-html5-radioads allows Reflected XSS.This issue affects SHOUT: from n/a through = 3.5.3...
CVE-2025-48279 WordPress WC MyParcel Belgium plugin <= 4.5.5-beta - Reflected Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Richard Perdaan WC MyParcel Belgium allows Reflected XSS. This issue affects WC MyParcel Belgium: from 4.5.5 through beta...
CVE-2025-48279
CVE-2025-48279 is a reflected XSS vulnerability in the WC MyParcel Belgium WordPress plugin, affecting versions from 4.5.5 through beta. The issue arises from improper neutralization of input during web page generation . The CVE entry carries a CVSS v3.1 base score of 7.1 (HIGH) with vectors: AV:...
WordPress plugin Backup and Staging by WP Time Capsule 跨站脚本漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress plugin is an application plugin. A cross-site scripting vulnerability exists in the WordPress Backup and Staging by WP Time Capsule plugin that stems from improper input neutralization and can be exploited by a...
PT-2025-24488 · Unknown · Themeton Spare
Name of the Vulnerable Software and Affected Versions: themeton Spare versions n/a through 1.7 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, allowing Reflected XSS. This enables potential attackers to inject...
CVE-2025-30937
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in stefanledin Responsify WP responsify-wp allows Stored XSS.This issue affects Responsify WP: from n/a through = 1.9.11...
CVE-2025-30638
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in PowieT Powie's Uptime Robot powies-uptime-robot allows Stored XSS.This issue affects Powie's Uptime Robot: from n/a through = 0.9.7...
CVE-2025-29003
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in mva7 The Holiday Calendar the-holiday-calendar allows Stored XSS.This issue affects The Holiday Calendar: from n/a through = 1.18.2.1...
CVE-2025-30950
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in WP Wham All Currencies for WooCommerce woocommerce-all-currencies allows Stored XSS.This issue affects All Currencies for WooCommerce: from n/a through = 2.4.3...
CVE-2025-49306
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in catchsquare WP Social Widget wp-social-widget allows Stored XSS.This issue affects WP Social Widget: from n/a through = 2.3...
CVE-2025-49427
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Ryan Burnette Abbie Expander abbie-expander allows Stored XSS.This issue affects Abbie Expander: from n/a through = 1.0.1...
CVE-2025-49442
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Mostafa Shahiri Simple Nested Menu simple-nested-menu allows Stored XSS.This issue affects Simple Nested Menu: from n/a through = 1.0...
CVE-2025-49262
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in shaonsina Sina Extension for Elementor sina-extension-for-elementor allows Stored XSS.This issue affects Sina Extension for Elementor: from n/a through = 3.6.1...
CVE-2025-28989
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in arildur Read More Login read-more-login allows Stored XSS.This issue affects Read More Login: from n/a through = 2.0.3...