CVE-2025-23494

CVE-2025-23494 corresponds to a reflected XSS in the WordPress Quizzin plugin, affecting versions up to 1.01.4 (NotFound Quizzin). Public details in the provided connected documents confirm the vulnerability type (Reflected XSS) and affected software, but do not specify a fixed version or remedia...

CVE-2025-23496

CVE-2025-23496 describes a Reflected Cross-Site Scripting (XSS) vulnerability in the WordPress WP FPO plugin (and NotFound WP FPO) with improper input neutralization during web page generation. Affected: WP FPO plugin versions up to 1.0 (and NotFound WP FPO up to 1.0). Documented by multiple sour...

CVE-2025-23490

CVE-2025-23490 affects the WordPress Browser-Update-Notify plugin (versions

CVE-2025-23488

CVE-2025-23488 affects the WordPress rng-refresh plugin (versions

CVE-2025-23487

CVE-2025-23487: WordPress Easy Gallery (NotFound/Easy Gallery) plugin <= 1.4 is affected by Reflected XSS due to improper input neutralization during page generation. Exploitation requires user interaction and can occur without privileges over the network; impact is limited to client-side scri...

CVE-2025-23478

The CVE-2025-23478 entry concerns WordPress Photo Video Store plugin

CVE-2025-23479

CVE-2025-23479 concerns the WordPress melascrivi plugin (versions

CVE-2025-23473

CVE-2025-23473 is a reflected Cross-Site Scripting (XSS) vulnerability in the WordPress plugin WordPress Killer Theme Options (versions <= 2.0). The root cause is improper neutralization of input during web page generation. Multiple sources (NVD, CVE records, Red Hat, CVE list, Cyber risk enri...

CVE-2025-23472

CVE-2025-23472 affects the WordPress NotFound Flexo Slider plugin, specifically versions

CVE-2025-23468

CVE-2025-23468 affects WordPress plugin NotFound Essay Wizard (wpCRES) versions up to and including 1.0.6.4. The issue is a Reflected Cross-Site Scripting (XSS) due to improper neutralization of input during web page generation. Affected component: wpCRES plugin for Essay Wizard; vulnerable versi...

CVE-2025-23465

CVE-2025-23465 concerns the WordPress plugin Vampire Character Manager (versions <= 2.13). The issue is a Reflected Cross‑Site Scripting (XSS) vulnerability caused by improper neutralization of input during web page generation. Affected product: WordPress Vampire Character Manager plugin

WordPress plugin NotFound Smooth Dynamic Slider 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. WordPress plugin is an application plugin that supports personal blog sites on PHP and MySQL servers. A cross-site scripting vulnerability exists in...

WordPress plugin NotFound Attach Gallery Posts 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation, a blogging platform developed in the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site scripting vulnerability exists in WordPress...

WordPress plugin NotFound Twitter News Feed 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site scripting vulnerability exists...

WordPress plugin NotFound Awesome Twitter Feeds 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site scripting vulnerability exists...

WordPress plugin NotFound melascrivi 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. WordPress plugin is an application plugin that supports personal blog sites on servers running PHP and MySQL. A cross-site scripting vulnerability exists...

WordPress plugin NotFound Photo Video Store 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site scripting vulnerability exists in...

WordPress plugin NotFound Flexo Slider 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site scripting vulnerability exists...

WordPress plugin NotFound RSVP ME 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers running PHP and MySQL. WordPress plugin is an application plugin. A cross-site scripting vulnerabili...

WordPress plugin NotFound WP SpaceContent 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site request forgery vulnerability...