CVE-2025-22365 WordPress EMC2 Alert Boxes Plugin <= 1.3 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Eric McNiece EMC2 Alert Boxes allows Stored XSS.This issue affects EMC2 Alert Boxes: from n/a through 1.3...

CVE-2025-22581

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Bytephp Arcade Ready arcadeready allows Stored XSS.This issue affects Arcade Ready: from n/a through = 1.1...

CVE-2025-22572

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Brian Legacy ePlayer sportspress-tv allows Stored XSS.This issue affects Legacy ePlayer: from n/a through = 0.9.9...

CVE-2025-22544

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Mind Doodle Mind Doodle Visual Sitemaps & Tasks mind-doodle-sitemap allows Stored XSS.This issue affects Mind Doodle Visual Sitemaps & Tasks: from n/a through = 1.6...

CVE-2025-22532

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in snagysandor Simple Photo Sphere simple-photo-sphere allows Stored XSS.This issue affects Simple Photo Sphere: from n/a through = 0.0.10...

CVE-2024-56056

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in kmfoysal06 SimpleCharm simplecharm allows Reflected XSS.This issue affects SimpleCharm: from n/a through = 1.4.3...

CVE-2025-22338

CVE-2025-22338 : Reflected XSS in WP-tagMaker (WordPress plugin) due to improper neutralization of input during web page generation. Affects WP-tagMaker versions up to and including 0.2.2 (n/a through 0.2.2). CVSSv3.1 base score 7.1 (High; Network), with user interaction required. Root cause: inp...

CVE-2025-22532 WordPress Simple Photo Sphere plugin <= 0.0.10 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in snagysandor Simple Photo Sphere simple-photo-sphere allows Stored XSS.This issue affects Simple Photo Sphere: from n/a through = 0.0.10...

CVE-2025-22550

CVE-2025-22550 affects AddFunc Mobile Detect (WordPress plugin). The issue is a Stored Cross-Site Scripting vulnerability in AddFunc Mobile Detect &lt;= 3.1, caused by improper input neutralization during web page generation. Impact is stored XSS as described in multiple sources; no public exploi...

CVE-2025-22293

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in gutentor Gutentor gutentor allows DOM-Based XSS.This issue affects Gutentor: from n/a through = 3.4.3...

CVE-2024-56289

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Adrian Tobey Groundhogg groundhogg allows Reflected XSS.This issue affects Groundhogg: from n/a through = 3.7.3.3...

CVE-2024-56288

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Fahad Mahmood WP Docs allows Stored XSS.This issue affects WP Docs: from n/a through 2.2.1...

CVE-2024-51700

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in eutrue NAVER Analytics naver-analytics allows Stored XSS.This issue affects NAVER Analytics: from n/a through = 0.9...

CVE-2024-56288 WordPress WP Docs plugin <= 2.2.1 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Fahad Mahmood WP Docs wp-docs allows Stored XSS.This issue affects WP Docs: from n/a through = 2.2.1...

CVE-2024-56287 WordPress WP jQuery DataTable Plugin <= 4.0.1 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in AppJetty WP jQuery DataTable wp-jquery-datatable allows Stored XSS.This issue affects WP jQuery DataTable: from n/a through = 4.0.1...

CVE-2025-22308

CVE-2025-22308 is a stored XSS vulnerability in WordPress plugin Smart Custom Fields (aka Smart Custom Fields by Takashi Kitajima). The issue affects Smart Custom Fields versions up to 5.0.0 and is tied to improper input neutralization during web page generation (stored XSS). The vulnerability is...

CVE-2025-22320 WordPress ProductDyno plugin <= 1.0.24 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in ProductDyno ProductDyno productdyno allows Reflected XSS.This issue affects ProductDyno: from n/a through = 1.0.24...

CVE-2025-22339 WordPress Store Commerce theme <= 1.2.3 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in athemeart Store Commerce store-commerce allows DOM-Based XSS.This issue affects Store Commerce: from n/a through = 1.2.3...

CVE-2025-22359

CVE-2025-22359 : Reflected XSS in SyncFields (WordPress plugin) — improper neutralization during web page generation leads to cross-site scripting. Affected: SyncFields versions up to 2.1 (from unknown earliest to 2.1). CVSSv3.1 score 7.1 (HIGH). Connected sources corroborate the Reflected XSS an...

CVE-2025-22359 WordPress SyncFields plugin <= 2.1 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in PJFC SyncFields allows Reflected XSS.This issue affects SyncFields: from n/a through 2.1...