CVE-2025-53426

CVE-2025-53426 affects the WordPress plugin Likert Survey Master up to version 0.8.0.1. The issue is an improper neutralization of input during web page generation, leading to a reflected Cross-Site Scripting (XSS) vulnerability. The vulnerability occurs in the plugin’s handling of user-supplied ...

CVE-2025-52735 WordPress NextMove Lite plugin <= 2.24.0 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in XLPlugins NextMove Lite woo-thank-you-page-nextmove-lite allows Reflected XSS.This issue affects NextMove Lite: from n/a through = 2.24.0...

CVE-2025-49956

CVE-2025-49956 concerns WordPress Fade Slider Plugin (

CVE-2025-49927 WordPress JetWooBuilder plugin <= 2.1.20.1 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Crocoblock JetWooBuilder jet-woo-builder allows Stored XSS.This issue affects JetWooBuilder: from n/a through = 2.1.20.1...

CVE-2025-39534 WordPress Terms Dictionary Plugin <= 1.5.1 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Somonator Terms Dictionary terms-dictionary allows Reflected XSS.This issue affects Terms Dictionary: from n/a through = 1.5.1...

CVE-2025-62702

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in The Wikimedia Foundation Mediawiki - PageTriage Extension allows Stored XSS.This issue affects Mediawiki - PageTriage Extension: from master before 1.44...

PT-2025-43250

Name of the Vulnerable Software and Affected Versions kamleshyadav RockON DJ versions through 3.3 Description The software contains a flaw due to improper neutralization of input during web page generation, leading to a Reflected Cross-Site Scripting XSS condition. This allows an attacker to inje...

PT-2025-43234

Name of the Vulnerable Software and Affected Versions bobbingwide oik-privacy-policy versions through 1.4.9 Description The software contains a flaw due to improper neutralization of input during web page generation, leading to a Reflected Cross-site Scripting condition. This allows for the...

PT-2025-43155

Name of the Vulnerable Software and Affected Versions jurajpuchky Fix Multiple Redirects versions through 1.2.3 Description The software contains a flaw related to improper input handling during web page generation, which allows for Reflected Cross-site Scripting XSS. This means that malicious...

PT-2025-43200

Name of the Vulnerable Software and Affected Versions xtemos WoodMart versions prior to 8.3.2 Description The software contains a flaw related to improper input handling during web page generation, specifically a DOM-Based Cross-site Scripting issue. This allows for the execution of malicious...

PT-2025-43242

Name of the Vulnerable Software and Affected Versions Chris Taylor Child Themes versions through 1.0.1 Description The software contains a flaw related to improper input handling during web page generation, which can lead to Reflected Cross-Site Scripting XSS. This allows an attacker to inject...

PT-2025-43273

Name of the Vulnerable Software and Affected Versions Arevico WP Tactical Popup versions through 1.1 Description The software contains a flaw related to improper input handling during web page generation, specifically a Reflected Cross-Site Scripting XSS issue. This allows for the injection of...

PT-2025-43219

Name of the Vulnerable Software and Affected Versions Robokassa payment gateway for Woocommerce versions through 1.8.1 Description The Robokassa payment gateway for Woocommerce contains a flaw related to improper neutralization of input during web page generation, which allows for Reflected...

PT-2025-43152

Name of the Vulnerable Software and Affected Versions Somonator Terms Dictionary versions through 1.5.1 Description The Somonator Terms Dictionary software contains a flaw due to improper neutralization of input during web page generation, leading to a Reflected Cross-site Scripting XSS condition...

PT-2025-43204

Name of the Vulnerable Software and Affected Versions ThemeFusion Fusion Builder versions through 3.13.2 Description The software contains a flaw related to improper input handling during web page generation, specifically a DOM-Based Cross-site Scripting issue. This allows for the execution of...

PT-2025-43238

Name of the Vulnerable Software and Affected Versions colome Slide Puzzle versions through 1.0.0 Description The software contains a flaw related to improper input handling during web page generation, specifically a Reflected Cross-site Scripting XSS issue. This allows for the injection of...

PT-2025-43255

Name of the Vulnerable Software and Affected Versions AA-Team Woocommerce Envato Affiliates versions through 1.2.1 Description The software contains a flaw due to improper handling of user-supplied data when creating web pages, leading to a potential Reflected Cross-Site Scripting XSS condition...

CVE-2025-62657

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in The Wikimedia Foundation MediaWiki PageForms extension allows Stored XSS.This issue affects MediaWiki PageForms extension: 1.44...

UBUNTU-CVE-2025-62694

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in The Wikimedia Foundation Mediawiki - WikiLove Extension allows Stored XSS.This issue affects Mediawiki - WikiLove Extension: 1.39...

EUVD-2025-35136

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in The Wikimedia Foundation Mediawiki - Wikistories allows Stored XSS.This issue affects Mediawiki - Wikistories: from master before 1.44...