CVE-2025-31057

CVE-2025-31057 is a reflected cross-site scripting (XSS) vulnerability in the Universal Video Player WordPress plugin (LambertGroup), affecting versions from n/a up to 1.4.0. It stems from improper neutralization of input during web page generation. CVSS 3.1 base score 7.1 (HIGH): attack vector N...

CVE-2025-31057 WordPress Universal Video Player plugin <= 1.4.0 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in LambertGroup Universal Video Player elementorwidgetuniversalvideoplayer allows Reflected XSS.This issue affects Universal Video Player: from n/a through = 1.4.0...

CVE-2025-31058 WordPress Revolution Video Player plugin <= 2.9.2 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in LambertGroup Revolution Video Player revolutionvideoplayer allows Reflected XSS.This issue affects Revolution Video Player: from n/a through = 2.9.2...

CVE-2025-31058 WordPress Revolution Video Player plugin <= 2.9.2 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in LambertGroup Revolution Video Player allows Reflected XSS. This issue affects Revolution Video Player: from n/a through 2.9.2...

CVE-2025-31061 WordPress Wishlist plugin <= 2.1.0 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in redqteam Wishlist wishlist allows Reflected XSS.This issue affects Wishlist: from n/a through = 2.1.0...

CVE-2025-31061 WordPress Wishlist plugin <= 2.1.0 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in redqteam Wishlist allows Reflected XSS. This issue affects Wishlist: from n/a through 2.1.0...

CVE-2025-31061

CVE-2025-31061 describes a reflected XSS in the WordPress Wishlist (Wishlist – WordPress plugin) affecting versions from n/a up to 2.1.0. The issue arises from improper neutralization of input during web page generation, enabling an attacker to inject arbitrary scripts via user-supplied input tha...

CVE-2025-31917

CVE-2025-31917 affects the Universal Video Player plugin for WordPress. The vulnerability is due to improper input handling during web page generation, enabling a Reflected XSS in versions from 0 through 3.8.3. The CVSS v3.1 base score is 7.1 (HIGH). Exploitation would require user interaction an...

CVE-2025-31917 WordPress Universal Video Player plugin <= 3.8.3 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in LambertGroup Universal Video Player universalvideoplayer allows Reflected XSS.This issue affects Universal Video Player: from n/a through = 3.8.3...

CVE-2025-31925 WordPress SHOUT plugin <= 3.5.3 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in LambertGroup SHOUT lbg-audio8-html5-radioads allows Reflected XSS.This issue affects SHOUT: from n/a through = 3.5.3...

CVE-2025-31925

CVE-2025-31925 describes a Reflected XSS in LambertGroup SHOUT (WordPress plugin). Affected versions are SHOUT up to 3.5.3 (and possibly earlier, per description). The connected Wordfence vulnerability listing states the vulnerability is currently Unpatched. No exploit details are provided in the...

CVE-2025-32305 WordPress FlatNews theme <= 5.8 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Sneeit WordPress FlatNews Theme flatnews allows Reflected XSS.This issue affects WordPress FlatNews Theme: from n/a through = 5.8...

CVE-2025-48143 WordPress Formulario de contacto SalesUp! plugin <= 1.0.14 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in salesup2019 Formulario de contacto SalesUp! formularios-de-contacto-salesup allows Reflected XSS.This issue affects Formulario de contacto SalesUp!: from n/a through = 1.0.14...

CVE-2025-48143

CVE-2025-48143 concerns the WordPress plugin Formulario de contacto SalesUp! (&lt;= 1.0.14). The issue is a Reflected Cross-Site Scripting vulnerability caused by improper neutralization of input during web page generation. Affected software: SalesUp! Formulario de contacto plugin for WordPress, ...

CVE-2025-48279 WordPress WC MyParcel Belgium plugin <= 4.5.5-beta - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Richard Perdaan WC MyParcel Belgium allows Reflected XSS. This issue affects WC MyParcel Belgium: from 4.5.5 through beta...

CVE-2025-48279 WordPress WC MyParcel Belgium plugin <= 4.5.5-beta - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Richard Perdaan WC MyParcel Belgium allows Reflected XSS. This issue affects WC MyParcel Belgium: from 4.5.5 through beta...

CVE-2025-5528

The Social Sharing Plugin – Sassy Social Share plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the heateormastodonshare parameter in all versions up to, and including, 3.3.75 due to insufficient input sanitization and output escaping. This makes it possible for...

CVE-2025-40675 Reflected Cross-Site Scripting (XSS) in Bagisto

A Reflected Cross-Site Scripting XSS vulnerability has been found in Bagisto v2.0.0. This vulnerability allows an attacker to execute JavaScript code in the victim's browser by sending the victim a malicious URL using the parameter 'query' in '/search'. This vulnerability can be exploited to stea...

CVE-2025-40675 Reflected Cross-Site Scripting (XSS) in Bagisto

A Reflected Cross-Site Scripting XSS vulnerability has been found in Bagisto v2.0.0. This vulnerability allows an attacker to execute JavaScript code in the victim's browser by sending the victim a malicious URL using the parameter 'query' in '/search'. This vulnerability can be exploited to stea...

CVE-2025-4652

The Broadstreet WordPress plugin before 1.51.8 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin...