PT-2025-12902

Name of the Vulnerable Software and Affected Versions Narnoo Operator versions n/a through 2.0.0 Description The issue is related to Improper Neutralization of Input During Web Page Generation, also known as 'Cross-site Scripting', which allows Reflected XSS in Narnoo Operator. Recommendations Fo...

PT-2025-12903

Name of the Vulnerable Software and Affected Versions Reuven Karasik Your Lightbox versions n/a through 1.0 Description The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting. This allows for Reflected XSS in Reuven Karasik Your...

PT-2025-12924

Name of the Vulnerable Software and Affected Versions Display Post Meta versions n/a through 2.4.4 Description The issue is related to Improper Neutralization of Input During Web Page Generation, also known as 'Cross-site Scripting', which allows Reflected XSS. This enables an attacker to inject...

PT-2025-12934

Name of the Vulnerable Software and Affected Versions Bastien Ho Event post versions n/a through 5.9.8 Description The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting. This allows for Stored XSS in the Event post. Recommendations...

CVE-2025-26576: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in takumin WP Simple Slideshow wp-simple-slideshow allows Reflected XSS.This issue affects WP Simple Slideshow: from n/a through = 1.0...

CVE-2025-26583: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in videowhisper Video Share VOD video-share-vod allows Reflected XSS.This issue affects Video Share VOD: from n/a through = 2.7.9...

CVE-2025-23680: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Narnoo Narnoo Operator narnoo-shortcodes allows Reflected XSS.This issue affects Narnoo Operator: from n/a through = 2.0.0...

CVE-2025-23543: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in fomopay FOMO Pay Chinese Payment Solution fomo-payment-gateway-for-woocommerce allows Reflected XSS.This issue affects FOMO Pay Chinese Payment Solution: from n/a through = 2.0.4...

CVE-2025-23542: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Robert D Payne RDP Linkedin Login rdp-linkedin-login allows Reflected XSS.This issue affects RDP Linkedin Login: from n/a through = 1.7.0...

CVE-2025-27014: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in designingmedia Hostiko hostiko allows Reflected XSS.This issue affects Hostiko: from n/a through 30.1...

PT-2025-12930 · Newseqo · Newseqo

Name of the Vulnerable Software and Affected Versions: newseqo versions n/a through 2.1.1 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting. This allows for Stored XSS attacks. Recommendations: For versions n/a...

CVE-2025-23466: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in wpsiteeditor Site Editor Google Map site-editor-google-map allows Reflected XSS.This issue affects Site Editor Google Map: from n/a through = 1.0.1...

PT-2025-12956

Name of the Vulnerable Software and Affected Versions WP Multistore Locator versions 2.5.2 and earlier Description The issue is related to an SQL Injection vulnerability due to improper neutralization of special elements used in an SQL command. This allows for SQL Injection attacks. Recommendatio...

PT-2025-12932

Name of the Vulnerable Software and Affected Versions Build versions 1.0.3 and earlier Description The issue is related to improper neutralization of input during web page generation, which allows for stored cross-site scripting XSS. This means that an attacker can inject malicious scripts into a...

PT-2025-12951

Name of the Vulnerable Software and Affected Versions Omnify versions n/a through 2.0.3 Description The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting. This allows Reflected XSS, which can be exploited by attackers...

PT-2025-12898

Name of the Vulnerable Software and Affected Versions Rhizome Networks CG Button versions 1.0.5.6 and earlier Description The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, allowing Reflected XSS in Rhizome Networks CG Button...

PT-2025-12938

Name of the Vulnerable Software and Affected Versions designingmedia Hostiko versions prior to 30.1 Description The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting. This allows for Reflected XSS. Recommendations For versions prio...

PT-2025-12935

Name of the Vulnerable Software and Affected Versions Accounting for WooCommerce versions 1.6.8 and earlier Description The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting. This allows for Stored XSS attacks. Recommendations For...

PT-2025-12954

Name of the Vulnerable Software and Affected Versions NotFound Lightview Plus versions 3.1.3 and earlier Description The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, which allows Reflected XSS. Recommendations For versions...

WordPress plugin AppReview has a cross-site scripting vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL. WordPress plugin is an application plugin. A cross-site scripting...