CVE-2025-27319

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in ivan82 User List user-list allows Reflected XSS.This issue affects User List: from n/a through = 1.5.1...

CVE-2025-27292

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in PoppinsDigital.com WPYog Documents wpyog-documents allows Reflected XSS.This issue affects WPYog Documents: from n/a through = 1.3.5...

CVE-2025-23855

The CVE-2025-23855 entry affects the WordPress SpiderDisplay plugin (versions n/a through 1.9.1). The issue is an improper neutralization of input during web page generation, enabling Reflected Cross-Site Scripting (XSS). Public-enrichment sources confirm this affects SpiderDisplay up to version ...

CVE-2025-23782 WordPress TotalContest Lite Plugin <= 2.8.1 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in TotalSuite TotalContest Lite totalcontest-lite allows Reflected XSS.This issue affects TotalContest Lite: from n/a through = 2.8.1...

CVE-2025-23858 WordPress Custom Users Order Plugin <= 4.2 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Hiren Patel Custom Users Order custom-users-order allows Reflected XSS.This issue affects Custom Users Order: from n/a through = 4.2...

CVE-2025-24539 WordPress DeBounce Email Validator plugin <= 5.6.5 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in debounce DeBounce Email Validator debounce-io-email-validator allows Reflected XSS.This issue affects DeBounce Email Validator: from n/a through = 5.6.5...

CVE-2025-24539

CVE-2025-24539 concerns the WordPress DeBounce Email Validator plugin

CVE-2025-24539 WordPress DeBounce Email Validator plugin <= 5.6.5 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in debounce DeBounce Email Validator debounce-io-email-validator allows Reflected XSS.This issue affects DeBounce Email Validator: from n/a through = 5.6.5...

CVE-2025-24548

CVE-2025-24548 affects the WordPress plugin Autoglot – Automatic WordPress Translation, with a Reflected XSS vulnerability in versions n/a through 2.4.7 due to improper input neutralization during web page generation. Reported across multiple sources (NVD/Red Hat/CVE List) and corroborated by PT ...

CVE-2025-24553 WordPress Shipping with Venipak for WooCommerce plugin <= 1.22.3 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Akadrama Shipping with Venipak for WooCommerce wc-venipak-shipping allows Reflected XSS.This issue affects Shipping with Venipak for WooCommerce: from n/a through = 1.22.3...

CVE-2025-24619

The CVE-2025-24619 entry concerns the WordPress plugin WP Log Action (versions 0.51 and earlier). The vulnerability is a Reflected XSS caused by improper input neutralization during web page generation, allowing malicious scripts to be reflected in the response. Public sources (Patchstack, CVE re...

CVE-2025-24619 WordPress WP Log Action Plugin <= 0.51 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in webheadcoder WP Log Action wp-log-action allows Reflected XSS.This issue affects WP Log Action: from n/a through = 0.51...

CVE-2025-24621 WordPress Arconix Shortcodes plugin <= 2.1.15 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in tychesoftwares Arconix Shortcodes arconix-shortcodes allows Reflected XSS.This issue affects Arconix Shortcodes: from n/a through = 2.1.15...

CVE-2025-24621

The CVE-2025-24621 entry concerns the WordPress plugin Arconix Shortcodes (versions up to and including 2.1.15). The root cause is Improper Neutralization of Input During Web Page Generation, i.e., a Reflected Cross-Site Scripting (XSS) vulnerability. Affected component: Arconix Shortcodes; the v...

CVE-2025-24624 WordPress HT Event – WordPress Event Manager Plugin for Elementor Plugin <= 1.4.6 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in DevItems HT Event ht-event allows Reflected XSS.This issue affects HT Event: from n/a through = 1.4.6...

CVE-2025-24624

The CVE-2025-24624 entry applies to the WordPress HT Event (WordPress Event Manager Plugin for Elementor) plugin. Affected versions are 1.4.6 and earlier, with the root cause described as improper neutralization of input during web page generation, enabling a reflected Cross-Site Scripting (XSS) ...

CVE-2025-24640

CVE-2025-24640 concerns the WordPress plugin Empty Tags Remover (versions ≤ 1.0). The issue is an Improper Neutralization of Input During Web Page Generation that enables a Reflected XSS . Affected component is the plugin’s input handling, leading to script injection in reflected contexts. The CV...

CVE-2025-24645 WordPress Eazy Under Construction Plugin <= 1.0 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Rob Scott Eazy Under Construction allows Reflected XSS. This issue affects Eazy Under Construction: from n/a through 1.0...

CVE-2025-24645 WordPress Eazy Under Construction Plugin <= 1.0 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Rob Scott Eazy Under Construction eazy-under-construction allows Reflected XSS.This issue affects Eazy Under Construction: from n/a through = 1.0...

CVE-2025-24670 WordPress Term Taxonomy Converter Plugin <= 1.2 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Dhanendran Rajagopal Term Taxonomy Converter term-taxonomy-converter allows Reflected XSS.This issue affects Term Taxonomy Converter: from n/a through = 1.2...