CVE-2025-23688

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in editionskezzal Cobwebo URL Plugin cobwebo-url allows Reflected XSS.This issue affects Cobwebo URL Plugin: from n/a through = 1.0...

CVE-2025-23600

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in pinal.shah Send to a Friend Addon send-booking-invites-to-friends allows Reflected XSS.This issue affects Send to a Friend Addon: from n/a through = 1.4.1...

CVE-2025-23575

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in DevriX DX Sales CRM dx-sales-crm allows Reflected XSS.This issue affects DX Sales CRM: from n/a through = 1.1...

CVE-2025-23563

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in mbyte Explore pages explore-pages allows Reflected XSS.This issue affects Explore pages: from n/a through = 1.01...

CVE-2025-23526

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in NotFound Swift Calendar Online Appointment Scheduling allows Reflected XSS. This issue affects Swift Calendar Online Appointment Scheduling: from n/a through 1.3.3...

CVE-2025-23484

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Cojecto Predict When predict-when allows Reflected XSS.This issue affects Predict When: from n/a through = 1.3...

CVE-2025-23488

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Abolfazl Sabagh rng-refresh rng-refresh allows Reflected XSS.This issue affects rng-refresh: from n/a through = 1.0...

CVE-2025-23464

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Keir Whitaker Twitter News Feed twitter-news-feed allows Reflected XSS.This issue affects Twitter News Feed: from n/a through = 1.1.1...

CVE-2025-23447

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Kundan Yevale Smooth Dynamic Slider smooth-dynamic-slider allows Reflected XSS.This issue affects Smooth Dynamic Slider: from n/a through = 1.0...

CVE-2025-23425

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in marekki Marekkis Watermark marekkis-watermark allows Reflected XSS.This issue affects Marekkis Watermark: from n/a through = 0.9.4...

CVE-2025-26984 WordPress SMS Alert Order Notifications – WooCommerce plugin <= 3.7.8 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Cozy Vision SMS Alert Order Notifications sms-alert allows Reflected XSS.This issue affects SMS Alert Order Notifications: from n/a through = 3.7.8...

CVE-2025-26879

CVE-2025-26879 is a Reflected Cross‑Site Scripting (XSS) vulnerability affecting the WordPress plugin s2Member (Pro, up to build 241216). The issue arises from improper input neutralization during web page generation, enabling a reflected XSS payload to be executed in the context of a user’s brow...

CVE-2025-27278

CVE-2025-27278 affects NotFound AcuGIS Leaflet Maps Plugin for WordPress (

CVE-2025-27271

CVE-2025-27271 is a Reflected XSS in the WordPress plugin “DB Tables Import/Export” affecting version range from n/a through 1.0.1. The description identifies improper input neutralization during web page generation as the root cause. Multiple connected sources corroborate the same vulnerability ...

CVE-2025-27275 WordPress WOO Codice Fiscale plugin <= 1.6.3 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in andrewfisher WOO Codice Fiscale woo-codice-fiscale allows Reflected XSS.This issue affects WOO Codice Fiscale: from n/a through = 1.6.3...

CVE-2025-26557 WordPress ViperBar Plugin <= 2.0 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in viperchill ViperBar viperbar allows Reflected XSS.This issue affects ViperBar: from n/a through = 2.0...

CVE-2025-25133

CVE-2025-25133 describes a Reflected Cross-Site Scripting vulnerability in the WordPress WP Frontend Submit plugin (affecting versions from n/a through 1.1.0). Technical details in connected sources confirm the issue: improper input handling during web page generation enabling XSS. CVSS v3.1 base...

CVE-2025-25127 WordPress Contact Us By Lord Linus Plugin <= 2.6 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Rohitashv Singhal Contact Us By Lord Linus contact-us-by-lord-linus allows Reflected XSS.This issue affects Contact Us By Lord Linus: from n/a through = 2.6...

CVE-2025-25114

CVE-2025-25114 affects the WordPress plugin WordPress User Roles (WordPress User Roles plugin) versions &lt;= 1.0, with a Reflected Cross-Site Scripting (XSS) flaw. The initial record attributes this to Improper Neutralization of Input During Web Page Generation, enabling reflected XSS. The CVSS ...

CVE-2025-25087 WordPress seekXL Snapr plugin <= 2.0.6 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in NotFound seekXL Snapr allows Reflected XSS. This issue affects seekXL Snapr: from n/a through 2.0.6...