CVE-2025-30597

CVE-2025-30597 corresponds to a DOM-based XSS in IG Shortcodes (WordPress plugin) affecting IG Shortcodes <= 3.1. The issue arises from improper neutralization of input during web page generation, enabling XSS after loading the shortcode. Affected product: IG Shortcodes. Root cause: insufficie...

CVE-2025-30553

CVE-2025-30553 (GMO Font Agent) : The GMO Font Agent WordPress plugin is affected up to version 1.6, with an authenticated Stored Cross-Site Scripting vulnerability (type: Cross-site Scripting via improper input neutralization during page generation). The issue can be triggered by an authenticate...

CVE-2025-30530 WordPress AI Preloader plugin <= 1.0.2 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Atikul AI Preloader ai-preloader allows Stored XSS.This issue affects AI Preloader: from n/a through = 1.0.2...

CVE-2025-30527

CVE-2025-30527 involves My Bootstrap Menu (WordPress plugin). The connected Wordfence vulnerability entry identifies the affected software as My Bootstrap Menu and states vulnerability from earlier versions up to 1.2.1, describing an "Authenticated" stored Cross-Site Scripting (XSS) due to improp...

CVE-2025-26796

UNSUPPORTED WHEN ASSIGNED Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Apache Oozie. This issue affects Apache Oozie: all versions. As this project is retired, we do not plan to release a version that fixes this issue. Users are recommended t...

PT-2025-12659

Name of the Vulnerable Software and Affected Versions Forcepoint Email Security versions prior to 8.5.5 Description The issue is related to improper neutralization of script in attributes in a web page, which allows for Stored XSS in the Blocked Messages module. Recommendations For versions prior...

PT-2025-12638

Name of the Vulnerable Software and Affected Versions WP Parallax Content Slider versions 0.9.8 and earlier Description The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, which allows Stored XSS. This means that an attacker can...

PT-2025-12648

Name of the Vulnerable Software and Affected Versions catchsquare WP Social Widget versions n/a through 2.2.6 Description The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, which allows Stored XSS. This means that an attacker c...

PT-2025-12583

Name of the Vulnerable Software and Affected Versions Atikul AI Preloader versions 1.0.2 and earlier Description The issue is related to improper neutralization of input during web page generation, which allows for Stored Cross-site Scripting XSS. This means that an attacker can inject malicious...

PT-2025-12589

Name of the Vulnerable Software and Affected Versions Beautiful Link Preview versions 1.5.0 and earlier Description The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, which allows Stored XSS. This means that an attacker can...

PT-2025-12601

Name of the Vulnerable Software and Affected Versions Pretty file links versions n/a through 0.9 Description The issue is related to Improper Neutralization of Input During Web Page Generation, also known as 'Cross-site Scripting', which allows Stored XSS in Pretty file links. Recommendations For...

PT-2025-12603

Name of the Vulnerable Software and Affected Versions GMO Font Agent versions 1.6 and earlier Description The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting. This allows for Stored XSS attacks. Recommendations For GMO Font Agent...

PT-2025-12631

Name of the Vulnerable Software and Affected Versions Dourou Flickr set slideshows versions n/a through 0.9 Description The issue is related to an SQL Injection vulnerability due to improper neutralization of special elements used in an SQL command. This allows for SQL Injection attacks. The...

WordPress plugin WP Parallax Content Slider has a cross-site scripting vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plug-in. A cross-site scripting...

WordPress plugin “Include URL” cross-site scripting vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...

WordPress plugin IG Shortcodes cross-site scripting vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...

WordPress plugin include-file cross-site scripting vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers running PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting vulnerabilit...

WordPress plugin Easy Page Transition has a cross-site scripting vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...

PT-2025-12590

Name of the Vulnerable Software and Affected Versions Cristian Sarov Upload Quota per User versions 1.3 and earlier Description The issue is related to improper neutralization of input during web page generation, which allows for stored cross-site scripting XSS. This means that an attacker can...

PT-2025-12620

Name of the Vulnerable Software and Affected Versions Arefly Login Redirect versions 1.0.0 through 1.0.5 Description The issue is related to improper neutralization of input during web page generation, which allows for Stored Cross-site Scripting XSS. This means that an attacker can inject...