935 matches found
CVE-2025-23716
The CVE-2025-23716 entry concerns the WordPress Login Watchdog plugin (versions up to 1.0.4). Affected component: the plugin’s input handling during web page generation, with a root cause described as improper neutralization of input, leading to stored Cross-Site Scripting (XSS). Reported impact ...
CVE-2025-23619
CVE-2025-23619 refers to a reflected Cross-Site Scripting (XSS) vulnerability in the WordPress plugin Catch Duplicate Switcher (versions
CVE-2025-23637
CVE-2025-23637 affects the WordPress plugin 新淘客WordPress插件 up to version 1.1.2. The root cause is Improper Neutralization of Input During Web Page Generation, yielding Reflected XSS in NotFound 新淘客WordPress插件. Reported details confirm a Reflected XSS vulnerability with CVSSv3.1 base score 7.1 (HI...
CVE-2025-23613
WordPress WP Journal plugin
CVE-2025-23616
CVE-2025-23616 affects the WordPress Canalplan plugin (versions up to and including 5.31). The issue is an improper neutralization of input during web page generation, causing a reflected Cross-Site Scripting (XSS) vulnerability. Exploitation requires user interaction, and the CVSSv3.1 vector is ...
CVE-2025-23586 WordPress WP Post Category Notifications plugin <= 1.0 - Reflected Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in MAL73049 WP Post Category Notifications wp-post-category-notifications allows Reflected XSS.This issue affects WP Post Category Notifications: from n/a through = 1.0...
CVE-2025-23579
CVE-2025-23579 affects the WordPress plugin DZS Ajaxer Lite (versions up to 1.04). The vulnerability is a Stored Cross-Site Scripting flaw caused by improper neutralization of input during web page generation. Multiple sources (NVD, Red Hat advisory, CVE listings, and Patchstack) uniformly descri...
CVE-2025-23584 WordPress Pin Locations on Map plugin <= 1.0 - Reflected Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in NotFound Pin Locations on Map allows Reflected XSS. This issue affects Pin Locations on Map: from n/a through 1.0...
CVE-2025-23584
CVE-2025-23584 concerns the WordPress plugin Pin Locations on Map (versions <= 1.0). The vulnerability is a reflected Cross‑Site Scripting (XSS) caused by improper neutralization of input during web page generation. Impact is a reflected XSS that could affect pages rendering user‑provided inpu...
CVE-2025-23586
CVE-2025-23586 concerns the WordPress plugin WP Post Category Notifications (versions <= 1.0). The vulnerability is a reflected Cross-Site Scripting (XSS) flaw caused by improper neutralization of input during web page generation, enabling attacker-controlled input to be reflected in a web pag...
CVE-2025-23587
CVE-2025-23587 is a reflected Cross-Site Scripting vulnerability in the WordPress plugin “all-in-one-box-login”
CVE-2025-23565
CVE-2025-23565 affects WordPress Wibstats plugin versions up to 0.5.5, with a reflected XSS due to improper input neutralization in web page generation. Affected component is the Wibstats plugin for WordPress (NotFound Wibstats). The CVSSv3.1 base score is 7.1 (HIGH) with network attack vector, n...
CVE-2025-23575
The CVE-2025-23575 entry concerns the WordPress DX Sales CRM plugin (versions
CVE-2025-23576
CVE-2025-23576 relates to a Reflected XSS in the WordPress WP Intro.JS plugin (versions
CVE-2025-23563
CVE-2025-23563 is a reflected XSS in the WordPress Explore pages plugin (versions
CVE-2025-23570
CVE-2025-23570 is a Reflected XSS in the WordPress WP Social Links plugin (
CVE-2025-23570 WordPress WP Social Links plugin <= 0.3.1 - Reflected Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Mitchell Bundy WP Social Links wp-social-links allows Reflected XSS.This issue affects WP Social Links: from n/a through = 0.3.1...
CVE-2025-23552
CVE-2025-23552 affects the WordPress WordPress Texteller plugin (versions
CVE-2025-23538
The CVE refers to a reflected Cross-Site Scripting (XSS) vulnerability in the WordPress WP Contest plugin, affecting versions up to 1.0.0. The root cause is improper neutralization of input during web page generation, enabling reflected XSS. Connected sources consistently describe the issue and l...