CVE-2025-26769

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Webilia Inc. Vertex Addons for Elementor addons-for-elementor-builder allows Stored XSS.This issue affects Vertex Addons for Elementor: from n/a through = 1.2.0...

CVE-2025-23845

The CVE-2025-23845 entry concerns the WordPress plugin ImageMeta (ERA404 ImageMeta) with a Reflected Cross-Site Scripting vulnerability caused by improper input neutralization. Affected versions are 1.1.2 and earlier. Public sources in connected documents consistently identify the issue as Reflec...

CVE-2025-23840 WordPress WP-NOTCAPTCHA Plugin <= 1.3.1 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in webjema WP-NOTCAPTCHA wp-notcaptcha allows Reflected XSS.This issue affects WP-NOTCAPTCHA: from n/a through = 1.3.1...

CVE-2025-26778

CVE-2025-26778 is a stored XSS in the WordPress Gallery Custom Links Plugin (gallery)

CVE-2025-26770

CVE-2025-26770 is a stored XSS vulnerability in the WordPress Waymark plugin

CVE-2025-26772

CVE-2025-26772 is a stored XSS in DethemeKit For Elementor (WordPress plugin) up to and including version 2.1.8 due to improper input neutralization during web page generation. Exploitation context is stored XSS; the issue is confirmed by multiple sources and is rated medium severity (CVSS v3.1: ...

CVE-2025-26754

CVE-2025-26754 affects the WordPress Timeline Block plugin (versions n/a through 1.1.1). It is a Stored XSS due to improper input neutralization during web page generation. Affected software: Timeline Block – Timeline Block Plugin for WordPress. Impact: stored script execution in a victim’s brows...

WordPress Plugin imagemeta Cross-Site Script Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripti...

PT-2025-7012

Name of the Vulnerable Software and Affected Versions: webjema WP-NOTCAPTCHA versions 1.3.1 and earlier Description: The issue is related to improper neutralization of input during web page generation, also known as 'Cross-site Scripting'. This allows for Reflected XSS. Recommendations: For webje...

CVE-2025-23975

CVE-2025-23975 is a Stored XSS in the WordPress Botnet Attack Blocker plugin (vulnerable:

CVE-2025-23652

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Fabio Zuanon Add custom content after post add-custom-content-after-post allows Reflected XSS.This issue affects Add custom content after post: from n/a through = 1.0...

CVE-2025-24617

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in AcyMailing Newsletter Team AcyMailing SMTP Newsletter acymailing allows Reflected XSS.This issue affects AcyMailing SMTP Newsletter: from n/a through 9.11.1...

CVE-2025-24688

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in brandtoss WP Mailster wp-mailster allows Reflected XSS.This issue affects WP Mailster: from n/a through = 1.8.20.0...

CVE-2025-24558

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in CRM Perks CRM Perks support-x allows Reflected XSS.This issue affects CRM Perks: from n/a through = 1.1.5...

PT-2025-6944

Name of the Vulnerable Software and Affected Versions: LTL Freight Quotes – Unishippers Edition versions 2.5.8 and earlier Description: The issue is related to improper neutralization of input during web page generation, which allows reflected Cross-site Scripting XSS. This problem enables...

WordPress plugin LTL Freight Quotes – Unishippers Edition Cross-site scripting vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site scripting vulnerability exists in...

WordPress plugin Leyka has a cross-site scripting vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...

WordPress plugin Qubely – Advanced Gutenberg Blocks: Cross-site scripting vulnerabilities

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. WordPress plugin is an application plugin that supports personal blogs on PHP and MySQL servers. A cross-site scripting vulnerability exists in WordPress...

PT-2025-6960

Name of the Vulnerable Software and Affected Versions: Ad Inserter Pro versions n/a through 2.7.39 Description: The issue affects NotFound Ad Inserter Pro, allowing Reflected XSS due to improper neutralization of input during web page generation. This is a Cross-site Scripting vulnerability...

CVE-2025-24554

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in awcode AWcode Toolkit awcode-toolkit allows Reflected XSS.This issue affects AWcode Toolkit: from n/a through = 1.0.14...