CVE-2025-32560 WordPress WP-Hijri Plugin <= 1.5.3 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Mohammad I. Okfie WP-Hijri wp-hijri allows Reflected XSS.This issue affects WP-Hijri: from n/a through = 1.5.3...

CVE-2025-32560

CVE-2025-32560 concerns the WordPress WP-Hijri plugin. The connected Red Hat/Redundant sources and NVD entries specify an Improp er Neutralization of Input During Web Page Generation (Reflected XSS) vulnerability affecting the WP-Hijri plugin versions up to and including 1.5.3 . The description c...

CVE-2025-32561

CVE-2025-32561 : Reflected Cross-Site Scripting in the WordPress plugin WP_DEBUG Toggle (plugins.wp_debug_toggle) occurs due to improper input neutralization during web page generation. Affected versions are reported as n/a through 1.1. The connected documents do not provide a published patch or ...

CVE-2025-32561 WordPress WP_DEBUG Toggle plugin <= 1.1 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in plugins.club WPDEBUG Toggle enable-wp-debug-toggle allows Reflected XSS.This issue affects WPDEBUG Toggle: from n/a through = 1.1...

CVE-2025-32560 WordPress WP-Hijri Plugin <= 1.5.3 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Mohammad I. Okfie WP-Hijri allows Reflected XSS. This issue affects WP-Hijri: from n/a through 1.5.3...

CVE-2025-32564 WordPress Stop Registration Spam Plugin <= 1.24 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in tomroyal Stop Registration Spam stop-registration-spam allows Reflected XSS.This issue affects Stop Registration Spam: from n/a through = 1.24...

CVE-2025-32566 WordPress License For Envato Plugin <= 1.0.0 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Ashraful Sarkar Naiem License For Envato allows Reflected XSS. This issue affects License For Envato: from n/a through 1.0.0...

CVE-2025-32578 WordPress Coming Soon Countdown Plugin <= 2.2 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Mapro Collins Coming Soon Countdown allows Reflected XSS. This issue affects Coming Soon Countdown: from n/a through 2.2...

CVE-2025-32578

CVE-2025-32578 is a Reflected XSS in the WordPress plugin Coming Soon Countdown (vulnerable up to and including 2.2). The vulnerability arises during web page generation where user-controlled input is improperly neutralized, enabling reflected scripts. The CVE entry notes the impact as cross-site...

CVE-2025-32604 WordPress AWSA Shipping Plugin <= 1.3.0 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Sajjad Aslani AWSA Shipping awsa-shipping allows Reflected XSS.This issue affects AWSA Shipping: from n/a through = 1.3.0...

CVE-2025-32605

CVE-2025-32605 is a Reflected Cross-Site Scripting (XSS) vulnerability in the WordPress plugin MemberPress Discord Addon (expresstechsoftware) affecting versions up to and including 1.1.1. The root cause is Improper Neutralization of Input During Web Page Generation , i.e., input is not properly ...

CVE-2025-32605 WordPress MemberPress Discord Addon Plugin <= 1.1.1 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in expresstechsoftware MemberPress Discord Addon allows Reflected XSS. This issue affects MemberPress Discord Addon: from n/a through 1.1.1...

CVE-2025-32609 WordPress Verowa Connect Plugin <= 3.0.4 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Picture-Planet GmbH Verowa Connect verowa-connect allows Reflected XSS.This issue affects Verowa Connect: from n/a through = 3.0.4...

CVE-2025-32609

CVE-2025-32609 (Verowa Connect) is a reflected XSS in the WordPress plugin Verowa Connect (Picture-Planet GmbH) affecting versions up to 3.0.4. Root cause: improper neutralization of input during web page generation. Public sources (Red Hat, CVE lists, CVE databases) confirm the vulnerability and...

CVE-2025-32611 WordPress WooCommerce TBC Credit Card Payment Gateway (Free) Plugin <= 2.0.0 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in We Are De WooCommerce TBC Credit Card Payment Gateway Free allows Reflected XSS. This issue affects WooCommerce TBC Credit Card Payment Gateway Free: from n/a through 2.0.0...

CVE-2025-32615 WordPress Clinked Client Portal Plugin <= 1.10 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Clinked Clinked Client Portal clinked-client-portal allows Reflected XSS.This issue affects Clinked Client Portal: from n/a through = 1.10...

CVE-2025-32615

CVE-2025-32615 is a WordPress/plugin vulnerability in Clinked Client Portal (

CVE-2025-32622

CVE-2025-32622 affects the WordPress plugin OTP-less one tap Sign in. The flaw is an improper input neutralization during web page generation, enabling Reflected XSS. Affected versions are up to 2.0.58. No explicit exploitation status is provided in the documents. Remediation: upgrade to a versio...

CVE-2025-32622 WordPress OTP-less one tap Sign in Plugin <= 2.0.58 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in OTP-less OTP-less one tap Sign in otpless allows Reflected XSS.This issue affects OTP-less one tap Sign in: from n/a through = 2.0.58...

CVE-2025-32625 WordPress Mobile Blocks Plugin <= 1.0.2 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in pootlepress Mobile Pages mobile-pages allows Reflected XSS.This issue affects Mobile Pages: from n/a through = 1.0.2...