CVE-2025-23549

CVE-2025-23549 affects the WordPress Maniac SEO plugin (versions

CVE-2025-23539

CVE-2025-23539 concerns the WordPress plugin “Awesome Hooks” (NotFound) up to version 1.0.1. The issue is an improper neutralization of input during web page generation, resulting in a reflected cross-site scripting (XSS) vulnerability. Affected component: the WordPress plugin’s input handling in...

CVE-2025-23502

The CVE-2025-23502 entry concerns the WordPress Curated Search plugin (versions up to 1.2). The vulnerability is CSRF that enables Stored XSS, affecting Curated Search from n/a through 1.2. The connected sources consistently describe Cross-Site Request Forgery leading to stored cross-site scripti...

CVE-2025-23505

The CVE-2025-23505 entry concerns the WordPress Pit Login Welcome plugin, affected

CVE-2025-23516

CVE-2025-23516 corresponds to a reflected XSS in the WordPress plugin Sale with Razorpay (versions

CVE-2025-23496

CVE-2025-23496 describes a Reflected Cross-Site Scripting (XSS) vulnerability in the WordPress WP FPO plugin (and NotFound WP FPO) with improper input neutralization during web page generation. Affected: WP FPO plugin versions up to 1.0 (and NotFound WP FPO up to 1.0). Documented by multiple sour...

CVE-2025-23494

CVE-2025-23494 corresponds to a reflected XSS in the WordPress Quizzin plugin, affecting versions up to 1.01.4 (NotFound Quizzin). Public details in the provided connected documents confirm the vulnerability type (Reflected XSS) and affected software, but do not specify a fixed version or remedia...

CVE-2025-23490

CVE-2025-23490 affects the WordPress Browser-Update-Notify plugin (versions

CVE-2025-23488

CVE-2025-23488 affects the WordPress rng-refresh plugin (versions

CVE-2025-23487

CVE-2025-23487: WordPress Easy Gallery (NotFound/Easy Gallery) plugin <= 1.4 is affected by Reflected XSS due to improper input neutralization during page generation. Exploitation requires user interaction and can occur without privileges over the network; impact is limited to client-side scri...

CVE-2025-23478

The CVE-2025-23478 entry concerns WordPress Photo Video Store plugin

CVE-2025-23479

CVE-2025-23479 concerns the WordPress melascrivi plugin (versions

CVE-2025-23473

CVE-2025-23473 is a reflected Cross-Site Scripting (XSS) vulnerability in the WordPress plugin WordPress Killer Theme Options (versions <= 2.0). The root cause is improper neutralization of input during web page generation. Multiple sources (NVD, CVE records, Red Hat, CVE list, Cyber risk enri...

CVE-2025-23472

CVE-2025-23472 affects the WordPress NotFound Flexo Slider plugin, specifically versions

CVE-2025-23468

CVE-2025-23468 affects WordPress plugin NotFound Essay Wizard (wpCRES) versions up to and including 1.0.6.4. The issue is a Reflected Cross-Site Scripting (XSS) due to improper neutralization of input during web page generation. Affected component: wpCRES plugin for Essay Wizard; vulnerable versi...

CVE-2025-23465

CVE-2025-23465 concerns the WordPress plugin Vampire Character Manager (versions <= 2.13). The issue is a Reflected Cross‑Site Scripting (XSS) vulnerability caused by improper neutralization of input during web page generation. Affected product: WordPress Vampire Character Manager plugin

WordPress plugin NotFound Attach Gallery Posts 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation, a blogging platform developed in the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site scripting vulnerability exists in WordPress...

WordPress plugin NotFound Smooth Dynamic Slider 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. WordPress plugin is an application plugin that supports personal blog sites on PHP and MySQL servers. A cross-site scripting vulnerability exists in...

WordPress plugin NotFound Twitter News Feed 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site scripting vulnerability exists...

CVE-2025-25129: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in NotFound Callback Request allows Reflected XSS. This issue affects Callback Request: from n/a through 1.4...