CVE-2025-30838 WordPress Cozy Blocks plugin <= 2.1.6 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in CozyThemes Cozy Blocks cozy-addons allows Stored XSS.This issue affects Cozy Blocks: from n/a through = 2.1.6...

CVE-2025-30784 WordPress WP Subscription Forms plugin <= 1.2.3 - SQL Injection Vulnerability

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in WP Shuffle WP Subscription Forms wp-subscription-forms allows SQL Injection.This issue affects WP Subscription Forms: from n/a through = 1.2.3...

CVE-2025-30784 WordPress WP Subscription Forms plugin <= 1.2.3 - SQL Injection Vulnerability

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in WP Shuffle WP Subscription Forms wp-subscription-forms allows SQL Injection.This issue affects WP Subscription Forms: from n/a through = 1.2.3...

CVE-2025-30780

CVE-2025-30780 is a Stored XSS vulnerability in the Audio Album WordPress plugin (Affecting Audio Album:

CVE-2025-30776 WordPress Sitekit plugin <= 1.8 - Cross Site Scripting (XSS) Vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in webvitaly Sitekit sitekit allows Stored XSS.This issue affects Sitekit: from n/a through = 1.8...

PT-2025-13134

Name of the Vulnerable Software and Affected Versions moreconvert MC Woocommerce Wishlist versions 1.8.9 and earlier Description The issue is related to an SQL Injection vulnerability due to improper neutralization of special elements used in an SQL command. This allows for SQL Injection attacks...

CVE-2025-30763: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Olaf Lederer EO4WP fw-integration-for-emailoctopus allows Stored XSS.This issue affects EO4WP: from n/a through = 1.0.8.4...

CVE-2025-30768: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in mlaza jAlbum Bridge jalbum-bridge allows Stored XSS.This issue affects jAlbum Bridge: from n/a through = 2.0.18...

CVE-2025-30780: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in cubecolour Audio Album audio-album allows Stored XSS.This issue affects Audio Album: from n/a through = 1.5.0...

WordPress plugin Job Colors for WP Job Manager: Cross-site scripting vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...

PT-2025-13159

Name of the Vulnerable Software and Affected Versions WP Posts Carousel versions 1.3.7 and earlier Description The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting. This allows for Stored XSS attacks. Recommendations For WP Posts...

PT-2025-13231

Name of the Vulnerable Software and Affected Versions aThemes Addons for Elementor versions 1.0.0 through 1.0.8 Description The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting. This allows for Stored XSS attacks. Recommendations...

PT-2025-13412

Name of the Vulnerable Software and Affected Versions VaultRE Contact Form 7 versions 1.0 and earlier Description The issue affects VaultRE Contact Form 7, allowing Stored XSS due to improper neutralization of input during web page generation. This can lead to cross-site scripting. Recommendation...

PT-2025-13263

Name of the Vulnerable Software and Affected Versions Acowebs Product Table For WooCommerce versions 1.2.3 and earlier Description The issue affects the Acowebs Product Table For WooCommerce, allowing Stored XSS due to improper neutralization of input during web page generation. Recommendations F...

PT-2025-13235

Name of the Vulnerable Software and Affected Versions kendysond Payment Forms for Paystack versions n/a through 4.0.1 Description The issue is related to an SQL Injection vulnerability due to improper neutralization of special elements used in an SQL command. This allows for SQL Injection attacks...

PT-2025-13264

Name of the Vulnerable Software and Affected Versions Paytm Payment Donation versions through 2.3.3 Description The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting. This allows for Stored XSS attacks. Recommendations For versions...

PT-2025-13157

Name of the Vulnerable Software and Affected Versions codemacher Structured Content versions n/a through 1.6.3 Description The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, which allows Stored XSS. This means that an attacker...

PT-2025-13266

Name of the Vulnerable Software and Affected Versions yudleethemes Whitish Lite versions 2.1.13 and earlier Description The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, allowing Stored XSS. This means that an attacker can...

PT-2025-13233

Name of the Vulnerable Software and Affected Versions Plugin Devs Blog, Posts and Category Filter for Elementor versions n/a through 2.0.1 Description The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting. This allows for Stored XS...

PT-2025-13188

Name of the Vulnerable Software and Affected Versions Repute Infosystems ARPrice versions n/a through 4.1.3 Description The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting. This allows for Stored XSS attacks. Recommendations For...