CVE-2025-23867 WordPress WordPress File Search Plugin <= 1.2 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in markcoker WordPress File Search wpfilesearch allows Reflected XSS.This issue affects WordPress File Search: from n/a through = 1.2...

CVE-2025-23874 WordPress WP Block Pack plugin <= 1.1.6 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in FalconTheme Team WP Block Pack wp-block-pack allows Reflected XSS.This issue affects WP Block Pack: from n/a through = 1.1.6...

CVE-2025-23806 WordPress Ultimate Subscribe Plugin <=1.3 - CSRF to Reflected Cross Site Scripting (XSS) vulnerability

Cross-Site Request Forgery CSRF vulnerability in ThemeFarmer Ultimate Subscribe ultimate-subscribe allows Reflected XSS.This issue affects Ultimate Subscribe: from n/a through = 1.3...

CVE-2025-23867 WordPress WordPress File Search Plugin <= 1.2 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in markcoker WordPress File Search wpfilesearch allows Reflected XSS.This issue affects WordPress File Search: from n/a through = 1.2...

CVE-2025-23811 WordPress WP2APP Plugin <= 2.6.2 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in ghasemy14 WP2APP wp2appir allows Reflected XSS.This issue affects WP2APP: from n/a through = 2.6.2...

CVE-2025-23769 WordPress Content Mirror plugin <= 1.2 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in dreamsofmatter Content Mirror content-mirror allows Reflected XSS.This issue affects Content Mirror: from n/a through = 1.2...

CVE-2025-23770

CVE-2025-23770 is a reflected XSS affecting the WordPress plugin Fast Tube (notFound Fast Tube), with impact up to version 2.3.1. The CVSS 3.1 base score is 7.1 (HIGH), attack vector NETWORK, attack complexity LOW, privileges NONE, user interaction REQUIRED, and the vulnerability involves imprope...

CVE-2025-23770 WordPress Fast Tube plugin <= 2.3.1 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Caspie Fast Tube fast-tube allows Reflected XSS.This issue affects Fast Tube: from n/a through = 2.3.1...

CVE-2025-23732 WordPress Easy Filtering plugin <= 2.5.0 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in franciscopalacios Easy Filtering easy-filtering allows Reflected XSS.This issue affects Easy Filtering: from n/a through = 2.5.0...

CVE-2025-23732 WordPress Easy Filtering plugin <= 2.5.0 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in franciscopalacios Easy Filtering easy-filtering allows Reflected XSS.This issue affects Easy Filtering: from n/a through = 2.5.0...

CVE-2025-23758 WordPress pootle button plugin <= 1.2.0 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in pootlepress Pootle button pootle-button allows Reflected XSS.This issue affects Pootle button: from n/a through = 1.2.0...

CVE-2025-23758

CVE-2025-23758 affects the WordPress pootle-button plugin (NotFound Pootle button); vulnerability is a Reflected XSS in the plugin’s input handling, affecting versions up to 1.2.0. Exploitation details are not provided beyond the vulnerability type. Remediation: upgrade to version 1.2.0 or later ...

CVE-2025-23732

CVE-2025-23732 is a NotFound Easy Filtering (WordPress) Reflected XSS vulnerability. Public records describe improper input neutralization during web page generation, enabling reflected cross-site scripting. Affected product: Easy Filtering (WordPress plugin) with vulnerable range stated as from ...

CVE-2025-23700 WordPress yCyclista plugin <= 1.2.3 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Yonatan Reinberg yCyclista allows Reflected XSS. This issue affects yCyclista: from n/a through 1.2.3...

CVE-2025-23700

CVE-2025-23700 - Reflected XSS in yCyclista WordPress plugin Affected: Yonatan Reinberg yCyclista; version range from unspecified to 1.2.3.Vulnerability type: Improper neutralization of input during web page generation (Reflected XSS).Impact (as stated): Confidentiality, Integrity, and Availabili...

CVE-2025-23706 WordPress Jet Skinner for BuddyPress plugin <= 1.2.5 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in milordk Jet Skinner for BuddyPress jet-skinner-for-buddypress allows Reflected XSS.This issue affects Jet Skinner for BuddyPress: from n/a through = 1.2.5...

CVE-2025-23696

Technical details about CVE-2025-23696 (NotFound Staging CDN reflected XSS) are not publicly disclosed in the provided connected documents. No vendor/version/root-cause or remediation is specified here. Monitor for official updates from Red Hat/NVD for concrete details and patches.

CVE-2025-23683 WordPress MACME plugin <= 1.2 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in NotFound MACME allows Reflected XSS. This issue affects MACME: from n/a through 1.2...

CVE-2025-23697

CVE-2025-23697 is a Reflected XSS in Podčlánková inzerce (WebDeal s.r.o.) WordPress plugin. Affected: Podčlánková inzerce from n/a through 2.4.0. Root cause: improper neutralization of input during web page generation. Base score 7.1 (HIGH) with CVSS3.1: AV=N/AC=L/PR=N/UI=R/S=C/C=L/I=L/A=L. Conne...

CVE-2025-23696 WordPress Staging CDN plugin <= 1.0.0 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in NotFound Staging CDN allows Reflected XSS. This issue affects Staging CDN: from n/a through 1.0.0...