CVE-2024-13152

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in BSS Software Mobuy Online Machinery Monitoring Panel allows SQL Injection. This issue affects Mobuy Online Machinery Monitoring Panel: before 2.0...

CVE-2025-24688 WordPress WP Mailster Plugin <= 1.8.20.0 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in brandtoss WP Mailster wp-mailster allows Reflected XSS.This issue affects WP Mailster: from n/a through = 1.8.20.0...

CVE-2025-24641 WordPress Better WishList API plugin <= 1.1.3 - Stored Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in rickonlinenl Better WishList API better-wlm-api allows Stored XSS.This issue affects Better WishList API: from n/a through = 1.1.3...

CVE-2025-24615 WordPress Analytics Cat Plugin <= 1.1.2 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in fatcatapps Analytics Cat analytics-cat allows Reflected XSS.This issue affects Analytics Cat: from n/a through = 1.1.2...

CVE-2025-24641 WordPress Better WishList API plugin <= 1.1.3 - Stored Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in rickonlinenl Better WishList API allows Stored XSS. This issue affects Better WishList API: from n/a through 1.1.3...

CVE-2025-24614 WordPress Post Timeline Plugin <= 2.3.9 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Agile Logix Post Timeline post-timeline allows Reflected XSS.This issue affects Post Timeline: from n/a through = 2.3.9...

CVE-2025-24614 WordPress Post Timeline Plugin <= 2.3.9 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Agile Logix Post Timeline post-timeline allows Reflected XSS.This issue affects Post Timeline: from n/a through = 2.3.9...

CVE-2025-24554

CVE-2025-24554 affects the WordPress AWcode Toolkit plugin (versions

CVE-2025-24558 WordPress CRM Perks plugin <= 1.1.5 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in CRM Perks CRM Perks support-x allows Reflected XSS.This issue affects CRM Perks: from n/a through = 1.1.5...

CVE-2025-23788 WordPress Easy Filter Plugin <= 1.10 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Roni Saha Easy Filter easy-filter allows Reflected XSS.This issue affects Easy Filter: from n/a through = 1.10...

CVE-2025-23750

CVE-2025-23750: WordPress Custom Widget Creator

CVE-2025-23748 WordPress Singsys -Awesome Gallery plugin <= 1.0 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Singsys Singsys -Awesome Gallery awesome-gallery-singsys allows Reflected XSS.This issue affects Singsys -Awesome Gallery: from n/a through = 1.0...

CVE-2025-23653

CVE-2025-23653 is a reflected XSS in the WordPress plugin “Form To Online Booking” (NotFound Form To Online Booking) with affected range reported as n/a through 1.0. Root cause is improper input neutralization during web page generation, enabling reflected cross-site scripting. Public records in ...

CVE-2025-23652

Summary (CVE-2025-23652): A WordPress plugin issue in Add custom content after post (notFound) exhibits Reflected Cross-Site Scripting due to improper input neutralization during web page generation. Affected versions are n/a through 1.0. The Red Hat and PT Security entries explicitly note the vu...

CVE-2025-23650

CVE-2025-23650 describes a reflected XSS vulnerability in the WordPress plugin “Tidy.ro” by razvypp. The Red Hat and NVD entries confirm the flaw as an Improper Neutralization of Input During Web Page Generation, enabling Reflected XSS for Tidy.ro versions up to 1.3 (development and affected scop...

CVE-2025-23651

CVE-2025-23651 is a Reflected Cross-Site Scripting vulnerability in the WordPress Scroll Top plugin (NotFound Scroll Top) affecting versions up to 1.3.3. The issue stems from improper input neutralization during web page generation, enabling XSS in reflected context. Public references in multiple...

CVE-2025-23571

CVE-2025-23571 is a reflected XSS in WordPress Internal Links Generator (plugin)

CVE-2025-23647

CVE-2025-23647 is a WordPress WP-Clap plugin vulnerability: an improper neutralization of input leading to Reflected XSS affecting WP-Clap versions up to 1.5. The CVE lists a CVSS v3.1 base score of 7.1 (HIGH) with Network attack vector, Low confidentiality/integrity/availability impacts, and use...

CVE-2025-24700: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Xylus Themes WP Event Aggregator wp-event-aggregator allows Reflected XSS.This issue affects WP Event Aggregator: from n/a through = 1.8.2...

CVE-2025-23651: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in adamskaat Scroll Top scroll-to-top-builder allows Reflected XSS.This issue affects Scroll Top: from n/a through = 1.3.3...