CVE-2025-23599

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Aarvansh Infotech eMarksheet emarksheet allows Reflected XSS.This issue affects eMarksheet: from n/a through = 5.4.3...

CVE-2025-23755

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in tosend.it PAFacile pafacile allows Reflected XSS.This issue affects PAFacile: from n/a through = 2.6.1...

CVE-2025-23561

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in robertkay MLL Audio Player MP3 Ajax music-let-loose-mp3-audio-player allows Stored XSS.This issue affects MLL Audio Player MP3 Ajax: from n/a through = 0.7...

CVE-2025-22701

Server-Side Request Forgery SSRF vulnerability in shinetheme Traveler Layout Essential For Elementor traveler-layout-essential-for-elementor.This issue affects Traveler Layout Essential For Elementor: from n/a through 1.4...

CVE-2024-43333

Incorrect Privilege Assignment vulnerability in NotFound Admin and Site Enhancements ASE Pro allows Privilege Escalation. This issue affects Admin and Site Enhancements ASE Pro: from n/a through 7.6.2.1...

PT-2025-5450 · Unknown · Notfound Aio Shortcodes

Name of the Vulnerable Software and Affected Versions: NotFound AIO Shortcodes versions 1.3 and earlier Description: The issue is related to improper neutralization of input during web page generation, which allows for Stored XSS. This means that an attacker can inject malicious scripts into the...

PT-2025-5117 · WordPress · Notfound Wp Cloud

Name of the Vulnerable Software and Affected Versions: NotFound WP Cloud versions 1.4.3 and earlier Description: The issue is related to an improper limitation of a pathname to a restricted directory, also known as 'Path Traversal', allowing Absolute Path Traversal. This enables unauthorized acce...

CVE-2024-43333: Incorrect Privilege Assignment

Incorrect Privilege Assignment vulnerability in NotFound Admin and Site Enhancements ASE Pro allows Privilege Escalation. This issue affects Admin and Site Enhancements ASE Pro: from n/a through 7.6.2.1...

PT-2025-5202 · Unknown · Notfound Lockets

Name of the Vulnerable Software and Affected Versions: NotFound Lockets versions n/a through 0.999 Description: The issue is related to improper neutralization of input during web page generation, also known as 'Cross-site Scripting', which allows Reflected XSS. Recommendations: For versions n/a...

CVE-2025-24744

Missing Authorization vulnerability in NotFound Bridge Core. This issue affects Bridge Core: from n/a through 3.3...

CVE-2025-24653

Missing Authorization vulnerability in NotFound Admin and Site Enhancements ASE Pro allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Admin and Site Enhancements ASE Pro: from n/a through 7.6.1.1...

CVE-2025-23752

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Clifton Griffin CGD Arrange Terms shopp-arrange allows Reflected XSS.This issue affects CGD Arrange Terms: from n/a through = 1.1.3...

CVE-2025-24744

CVE-2025-24744 corresponds to a Missing Authorization (Broken Access) vulnerability in WordPress Bridge Core. The CVE note and Red Hat/Wordfence-related entries consistently describe it as affecting Bridge Core versions up to 3.3. The connected sources confirm the issue is a Missing Authorization...

CVE-2025-24653

CVE-2025-24653 concerns a Missing Authorization vulnerability in WordPress Admin and Site Enhancements (ASE) Pro, classified as a Broken Access Control issue affecting ASE Pro versions up to 7.6.1.1. The CVE entry lists a CVSS v3.1 base score of 4.3 (Medium) with NETWORK attack vector and LOW pri...

CVE-2025-23752

CVE-2025-23752 is a reflected Cross-Site Scripting (XSS) vulnerability in the WordPress plugin CGD Arrange Terms (NotFound CGD Arrange Terms). Affected versions are 1.1.3 and earlier (listed as from n/a through 1.1.3). The root cause is Improper Neutralization of Input During Web Page Generation,...

CVE-2025-22513

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Kyle Phillips Simple Locator simple-locator allows Reflected XSS.This issue affects Simple Locator: from n/a through = 2.0.4...

PT-2025-5556 · Unknown · Notfound Bridge Core

Name of the Vulnerable Software and Affected Versions: NotFound Bridge Core versions n/a through 3.3 Description: The issue is related to a Missing Authorization vulnerability in NotFound Bridge Core. This vulnerability affects the authorization process, potentially allowing unauthorized access...

CVE-2025-24744: Missing Authorization

Missing Authorization vulnerability in NotFound Bridge Core. This issue affects Bridge Core: from n/a through 3.3...

CVE-2025-24653: Missing Authorization

Missing Authorization vulnerability in NotFound Admin and Site Enhancements ASE Pro allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Admin and Site Enhancements ASE Pro: from n/a through 7.6.1.1...

CVE-2025-23838

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Rally Vincent Bauernregeln bauernregeln allows Reflected XSS.This issue affects Bauernregeln: from n/a through = 1.0.1...