13035 matches found
CVE-2025-23883 WordPress Stray Random Quotes Plugin <= 1.9.9 - Reflected Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in unalignedcoder Stray Random Quotes stray-quotes allows Reflected XSS.This issue affects Stray Random Quotes: from n/a through = 1.9.9...
CVE-2025-23881 WordPress LJ Custom Menu Links Plugin <= 2.5 - Reflected Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in littlejon LJ Custom Menu Links lj-custom-menu-links allows Reflected XSS.This issue affects LJ Custom Menu Links: from n/a through = 2.5...
CVE-2025-23850 WordPress Mojo Under Construction Plugin <= 1.1.2 - Reflected Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in mojowill Mojo Under Construction mojo-under-construction allows Reflected XSS.This issue affects Mojo Under Construction: from n/a through = 1.1.2...
CVE-2025-23850 WordPress Mojo Under Construction Plugin <= 1.1.2 - Reflected Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in mojowill Mojo Under Construction mojo-under-construction allows Reflected XSS.This issue affects Mojo Under Construction: from n/a through = 1.1.2...
CVE-2025-23813
CVE-2025-23813 concerns a reflected XSS in the WordPress Guten Free Options plugin. Affected versions are Guten Free Options up to 0.9.5 (and related notes reference 0.9.7 in Patchstack) with the root cause being improper neutralization of input during web page generation. The vulnerability permi...
CVE-2025-23731 WordPress Tax Report for WooCommerce plugin <= 2.2 - Reflected Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in infosoftplugin Tax Report for WooCommerce tax-report-for-woocommerce allows Reflected XSS.This issue affects Tax Report for WooCommerce: from n/a through = 2.2...
CVE-2025-23736 WordPress Form To JSON plugin <= 1.0 - Reflected Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in webgdawg Form To JSON form-to-json allows Reflected XSS.This issue affects Form To JSON: from n/a through = 1.0...
CVE-2025-23739 WordPress WP Ultimate Reviews FREE plugin <= 1.0.2 - Reflected Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in jtibbles WP Ultimate Reviews FREE wp-ultimate-reviews-free allows Reflected XSS.This issue affects WP Ultimate Reviews FREE: from n/a through = 1.0.2...
CVE-2025-23726
The CVE-2025-23726 entry concerns the WordPress ComparePress plugin (versions up to and including 2.0.8). The root cause is improper input neutralization during web page generation, enabling reflected cross-site scripting (XSS). Affected component: ComparePress plugin input handling; vulnerabilit...
CVE-2025-23718 WordPress Mancx AskMe Widget plugin <= 0.3 - Reflected Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in mancx Mancx AskMe Widget mancx-askme-widget allows Reflected XSS.This issue affects Mancx AskMe Widget: from n/a through = 0.3...
CVE-2025-23670 WordPress 4 author cheer up donate plugin <= 1.3 - Reflected Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in NotFound 4 author cheer up donate allows Reflected XSS. This issue affects 4 author cheer up donate: from n/a through 1.3...
CVE-2025-23587 WordPress all-in-one-box-login plugin <= 2.0.1 - Reflected Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Ashek Al Mahmud all-in-one-box-login all-in-one-login allows Reflected XSS.This issue affects all-in-one-box-login: from n/a through = 2.0.1...
CVE-2025-23579
CVE-2025-23579 affects the WordPress plugin DZS Ajaxer Lite (versions up to 1.04). The vulnerability is a Stored Cross-Site Scripting flaw caused by improper neutralization of input during web page generation. Multiple sources (NVD, Red Hat advisory, CVE listings, and Patchstack) uniformly descri...
CVE-2025-23570
CVE-2025-23570 is a Reflected XSS in the WordPress WP Social Links plugin (
CVE-2025-23576 WordPress WP Intro.JS Plugin plugin <= 1.1 - Reflected Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in cfuze WP Intro.JS wp-intro-js-tours allows Reflected XSS.This issue affects WP Intro.JS: from n/a through = 1.1...
CVE-2025-23563
CVE-2025-23563 is a reflected XSS in the WordPress Explore pages plugin (versions
CVE-2025-23526 WordPress Swift Calendar Online Appointment Scheduling plugin <= 1.3.3 - Reflected Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in NotFound Swift Calendar Online Appointment Scheduling allows Reflected XSS. This issue affects Swift Calendar Online Appointment Scheduling: from n/a through 1.3.3...
CVE-2025-23518
CVE-2025-23518 is a reflected XSS in the WordPress GoogleMapper plugin (versions up to and including 2.0.3). The vulnerability arises from improper neutralization of input during web page generation, enabling script injection. Affected software is the GoogleMapper plugin for WordPress; no exploit...
CVE-2025-23493
CVE-2025-23493 affects the WordPress Google Transliteration plugin (versions up to 1.7.2). The issue is a Reflected XSS caused by improper input neutralization during web page generation. Root cause: improper input handling; affected component: plugin’s rendering pathway. Impact per source: poten...