CVE-2025-23839

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Asif Shakeel Sticky Button sticky-chat-button allows Stored XSS.This issue affects Sticky Button: from n/a through = 1.0...

CVE-2025-23737

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in thobian Network-Favorites network-favorites allows Reflected XSS.This issue affects Network-Favorites: from n/a through = 1.1...

CVE-2025-23837

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in martinjuhasz One Backend Language one-backend-language allows Reflected XSS.This issue affects One Backend Language: from n/a through = 1.0...

CVE-2025-23885

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in anildhiman MJ Contact us mj-contact-us allows Reflected XSS.This issue affects MJ Contact us: from n/a through = 5.2.3...

CVE-2025-23622

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Sabuj Kundu CBX Accounting & Bookkeeping cbxwpsimpleaccounting allows Reflected XSS.This issue affects CBX Accounting & Bookkeeping: from n/a through = 1.3.14...

CVE-2025-23621

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in algothemes Causes – Donation Plugin causes allows Reflected XSS.This issue affects Causes – Donation Plugin: from n/a through = 1.0.01...

CVE-2025-23422

Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in moaluko Store Locator store-locator allows PHP Local File Inclusion.This issue affects Store Locator: from n/a through = 3.98.10...

CVE-2025-23885

CVE-2025-23885 refers to a Reflected XSS in the WordPress plugin MJ Contact us (through version 5.2.3). The vulnerability arises from improper neutralization of input during web page generation, enabling attacker-supplied input to be reflected in pages served to users. Public sources in the conne...

CVE-2025-23838

CVE-2025-23838 is a Reflected XSS in the WordPress Bauernregeln plugin NotFound, affecting versions n/a–1.0.1 (per sources from NVD/Red Hat) and publicly documented as a WordPress plugin vulnerability. The linked Red Hat/NVD entries confirm the same description and affected range. The PTSecurity ...

CVE-2025-23737

CVE-2025-23737 describes a Reflected XSS in WordPress Network-Favorites (NotFound Network-Favorites) caused by improper input neutralization during web page generation. Affected products: Network-Favorites up to version 1.1 (as per multiple sources). Impact notes in the CVE context indicate refle...

CVE-2025-23622

CVE-2025-23622 corresponds to a Reflected XSS in the WordPress CBX Accounting & Bookkeeping plugin (versions n/a through 1.3.14). The issue stems from improper input neutralization during web page generation. Public sources (Red Hat and CVE feed) confirm the affected product/version and describe ...

CVE-2025-23422

CVE-2025-23422 (WordPress Store Locator) A path traversal vulnerability in the NotFound Store Locator plugin (WordPress) allows PHP Local File Inclusion. Affected: Store Locator versions up to 3.98.10 (and possibly listed as NotFound Store Locator). Root cause: improper restriction of pathnames t...

PT-2025-5135 · Unknown · Notfound Bauernregeln

Name of the Vulnerable Software and Affected Versions: NotFound Bauernregeln versions 1.0.1 and below Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as 'Cross-site Scripting', which allows Reflected XSS. This means that an attacker can...

PT-2025-5059 · Unknown · Notfound Network-Favorites

Name of the Vulnerable Software and Affected Versions: NotFound Network-Favorites versions 1.1 and earlier Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, which allows Reflected XSS. This enables attackers to...

PT-2025-5171 · Unknown · Notfound Custom Page Extensions

Name of the Vulnerable Software and Affected Versions: NotFound Custom Page Extensions versions 0.6 and earlier Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, which allows Reflected XSS. This enables attackers ...

PT-2025-4869 · Unknown · Notfound Store Locator

Name of the Vulnerable Software and Affected Versions: NotFound Store Locator versions 3.98.10 and earlier Description: The issue is related to an Improper Limitation of a Pathname to a Restricted Directory, also known as 'Path Traversal', which allows PHP Local File Inclusion. This can potential...

PT-2025-5136 · Unknown · Notfound Sticky Button

Name of the Vulnerable Software and Affected Versions: NotFound Sticky Button versions n/a through 1.0 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as 'Cross-site Scripting', which allows Stored XSS. This means that an attacker can...

CVE-2025-23834

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in RaminMT Links/Problem Reporter report-broken-links allows Reflected XSS.This issue affects Links/Problem Reporter: from n/a through = 2.6.0...

CVE-2025-23835

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in jmraya Legal + legal-plus allows Reflected XSS.This issue affects Legal +: from n/a through = 1.0...

CVE-2025-23727

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in antonzaroutski AZ Content Finder az-content-finder allows Reflected XSS.This issue affects AZ Content Finder: from n/a through = 0.1...