WordPress plugin uListing has a SQL injection vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A SQL injection...

WordPress plugin Social Links has a cross-site scripting vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...

WordPress plugin WP Find Your Nearest has a cross-site scripting vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation. WordPress is a blogging platform developed in the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...

PT-2025-9476

Name of the Vulnerable Software and Affected Versions HasThemes WP Templata versions 1.0.7 and earlier Description The issue is related to improper neutralization of input during web page generation, which leads to a Cross-site Scripting XSS vulnerability, specifically Reflected XSS...

PT-2025-9497

Name of the Vulnerable Software and Affected Versions AcuGIS Leaflet Maps versions through 5.1.1.0 Description The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, allowing Reflected XSS. Recommendations For versions through...

PT-2025-9447

Name of the Vulnerable Software and Affected Versions Callback Request versions n/a through 1.4 Description The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, which allows Reflected XSS in the NotFound Callback Request...

PT-2025-9375

Name of the Vulnerable Software and Affected Versions WP FixTag versions through v2.0.2 Description The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting. This allows for Reflected XSS attacks. Recommendations For versions through...

PT-2025-9347

Name of the Vulnerable Software and Affected Versions Predict When versions n/a through 1.3 Description The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, allowing Reflected XSS. Recommendations For versions n/a through 1.3,...

PT-2025-9380

Name of the Vulnerable Software and Affected Versions DZS Ajaxer Lite versions 1.04 and earlier Description The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, allowing Stored XSS. Recommendations For versions 1.04 and earlier,...

PT-2025-9340

Name of the Vulnerable Software and Affected Versions Flexo Slider versions 1.0013 and earlier Description The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, allowing Reflected XSS attacks. Recommendations For Flexo Slider...

PT-2025-9344

Name of the Vulnerable Software and Affected Versions RSVP ME versions n/a through 1.9.9 Description The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting. This allows for Stored XSS attacks. Recommendations For versions n/a throug...

PT-2025-9346

Name of the Vulnerable Software and Affected Versions azurecurve Floating Featured Image versions 2.2.0 and earlier Description The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, allowing Reflected XSS in the azurecurve Floatin...

PT-2025-9345

Name of the Vulnerable Software and Affected Versions Ni WooCommerce Sales Report Email versions 3.1.4 and earlier Description The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting. This allows for Reflected XSS attacks...

PT-2025-9467

Name of the Vulnerable Software and Affected Versions NotFound Mobile versions 1.3.3 and earlier Description The issue is related to Improper Neutralization of Input During Web Page Generation, also known as 'Cross-site Scripting', which allows Reflected XSS. Recommendations For versions 1.3.3 an...

PT-2025-9460

Name of the Vulnerable Software and Affected Versions Staff Directory Plugin: Company Directory versions through 4.3 Description The issue is related to improper neutralization of input during web page generation, also known as Cross-site Scripting. This allows for Stored XSS attacks...

PT-2025-9462

Name of the Vulnerable Software and Affected Versions Migrate Posts versions from n/a through 1.0 Description The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, allowing Reflected XSS. Recommendations For versions from n/a...

PT-2025-9457

Name of the Vulnerable Software and Affected Versions WP Find Your Nearest versions 0.3.1 and earlier Description The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, allowing Reflected XSS. Recommendations For WP Find Your Neare...

PT-2025-9451

Name of the Vulnerable Software and Affected Versions WP Frontend Submit versions 1.1.0 and earlier Description The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting XSS, in the WP Frontend Submit plugin. This allows for Cross-Site...

PT-2025-9455

Name of the Vulnerable Software and Affected Versions WP Church Center versions 1.3.3 and earlier Description The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, which allows Reflected XSS. Recommendations For versions 1.3.3 and...

PT-2025-9450

Name of the Vulnerable Software and Affected Versions ravi Singh Visitor Details versions n/a through 1.0.1 Description The issue is related to improper neutralization of input during web page generation, which leads to a Stored XSS vulnerability. This allows for the storage of malicious scripts...