CVE-2025-32533

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Matat Technologies Deliver via Shipos for WooCommerce wc-shipos-delivery allows Reflected XSS.This issue affects Deliver via Shipos for WooCommerce: from n/a through = 2.1.7...

CVE-2025-32646

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in PickPlugins Question Answer question-answer allows Reflected XSS.This issue affects Question Answer: from n/a through = 1.2.70...

CVE-2025-32615

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Clinked Clinked Client Portal clinked-client-portal allows Reflected XSS.This issue affects Clinked Client Portal: from n/a through = 1.10...

CVE-2025-32514

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in cscode WooCommerce Estimate and Quote wc-estimate-and-quote allows Reflected XSS.This issue affects WooCommerce Estimate and Quote: from n/a through = 1.0.2.5...

CVE-2025-27302

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Claudio Adrian Marrero CHATLIVE chatlive allows SQL Injection.This issue affects CHATLIVE: from n/a through = 2.0.1...

CVE-2025-27313

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Bernd Altmeier Google Maps GPX Viewer google-maps-gpx-viewer allows Reflected XSS.This issue affects Google Maps GPX Viewer: from n/a through = 3.6...

CVE-2025-27309

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Jeannot Muller flickr-slideshow-wrapper flickr-slideshow-wrapper allows Stored XSS.This issue affects flickr-slideshow-wrapper: from n/a through = 5.4.6...

CVE-2025-39518

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in RedefiningTheWeb BMA Lite bma-lite-appointment-booking-and-scheduling allows SQL Injection.This issue affects BMA Lite: from n/a through = 1.4.2...

CVE-2025-39586

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Metagauss ProfileGrid profilegrid-user-profiles-groups-and-communities allows SQL Injection.This issue affects ProfileGrid : from n/a through = 5.9.4.8...

CVE-2025-46499

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in hccoder PayPal Express Checkout paypal-express-checkout allows Stored XSS.This issue affects PayPal Express Checkout: from n/a through = 2.1.2...

CVE-2025-46501

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in biancardi Mixcloud Embed mixcloud-embed allows Stored XSS.This issue affects Mixcloud Embed: from n/a through = 2.2.0...

CVE-2025-46469

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Benjamin Buddle Send From send-from allows Stored XSS.This issue affects Send From: from n/a through = 2.2...

CVE-2025-46469

CVE-2025-46469 (WordPress Send From plugin) is a stored XSS vulnerability caused by improper input neutralization during web page generation. Affected plugin versions are listed as 2.2 and earlier (n/a through 2.2). Connected sources confirm the issue as stored XSS with the potential impact on Wo...

CVE-2025-46451

CVE-2025-46451 is a stored XSS in the WordPress plugin Floating Social Bar , affecting versions up to 1.1.7. Root cause: improper neutralization of input during web page generation. Impact is described as stored cross-site scripting with logs indicating Medium severity (CVSS v3.1 base score 5.9)....

CVE-2025-46529

CVE-2025-46529 describes a stored XSS in the StressFree Sites Business Contact Widget (WordPress plugin) caused by improper input neutralization during web page generation. Affected versions are n/a through 2.7.0. Mitigation: upgrade the widget to a version later than 2.7.0 (exact fixed version n...

CVE-2025-46525

CVE-2025-46525 (WP Cookie Consent) : The vulnerability is an stored XSS caused by improper input neutralization during web page generation in the WordPress plugin WP Cookie Consent (affected: versions 1.0 and earlier). Root cause per sources: improper neutralization of input leading to Cross-site...

CVE-2025-46505 WordPress Peekaboo plugin <= 1.1 - Cross Site Scripting (XSS) Vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in farinspace Peekaboo peekaboo allows Stored XSS.This issue affects Peekaboo: from n/a through = 1.1...

CVE-2025-46438

CVE-2025-46438: Stored XSS in GTDB Guitar Tuners (warmwhisky) affecting versions n/a–4.2.2. Root cause is improper input neutralization during web page generation. CVSS v3.1 base score 6.5 (Network, Low to Moderate impact per document; user interaction required). Connected sources indicate no pub...

CVE-2025-46476 WordPress Awesome Wp Image Gallery <= 1.0 - Cross Site Scripting (XSS) Vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in nayon46 Awesome Wp Image Gallery allows Stored XSS. This issue affects Awesome Wp Image Gallery: from n/a through 1.0...

CVE-2025-39397

CVE-2025-39397 corresponds to a reflected cross-site scripting vulnerability in the WordPress plugin Anything Popup (versions up to 7.3). The issue arises from improper input neutralization during web page generation, enabling an attacker to inject and execute script in a victim’s browser. The CV...