CVE-2024-13629 Pushbiz <= 1.0 - Reflected XSS

The pushBIZ WordPress plugin through 1.0 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin...

CVE-2024-13630 News List <= 1.0 - Reflected XSS

The NewsTicker WordPress plugin through 1.0 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin...

CVE-2024-13630

The NewsTicker WordPress plugin (versions

CVE-2024-13571 Post Timeline < 2.3.10 - Reflected XSS

The Post Timeline WordPress plugin before 2.3.10 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin...

CVE-2024-13571

The Post Timeline WordPress plugin versions prior to 2.3.10 are vulnerable to Reflected Cross-Site Scripting (XSS) . The root cause is the insufficient sanitization and escaping of a parameter before it is output back onto the page. This vulnerability could be leveraged to target high-privilege u...

CVE-2024-13624 WPMovieLibrary <= 2.1.4.8 - Reflected XSS

The WPMovieLibrary WordPress plugin through 2.1.4.8 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin...

CVE-2024-13624 WPMovieLibrary <= 2.1.4.8 - Reflected XSS

The WPMovieLibrary WordPress plugin through 2.1.4.8 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin...

CVE-2024-13624

The WPMovieLibrary WordPress plugin, in versions through 2.1.4.8 , is vulnerable to a Reflected Cross-Site Scripting (XSS) flaw. The issue arises because the plugin fails to properly sanitize and escape the 'order' parameter on the import page before outputting it back to the user. Attackers can ...

CVE-2024-13571 Post Timeline < 2.3.10 - Reflected XSS

The Post Timeline WordPress plugin before 2.3.10 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin...

CVE-2024-12878 Custom Block Builder – Lazy Blocks < 3.8.3 - Reflected XSS

The Custom Block Builder WordPress plugin before 3.8.3 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin...

CVE-2024-12878

The Custom Block Builder WordPress plugin (also referred to as Lazy Blocks ) versions prior to 3.8.3 is vulnerable to a Reflected Cross-Site Scripting (XSS) flaw. The root cause is the lack of proper sanitization and escaping of a parameter before it is outputted back in the page. This vulnerabil...

CVE-2024-12737 WP BASE Booking of Appointments, Services and Events < 5.0.0 - Reflected XSS

The WP BASE Booking of Appointments, Services and Events WordPress plugin before 5.0.0 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin...

CVE-2024-12737 WP BASE Booking of Appointments, Services and Events < 5.0.0 - Reflected XSS

The WP BASE Booking of Appointments, Services and Events WordPress plugin before 5.0.0 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin...

CVE-2024-10483 SimplePress Forum < 6.10.11 - Reflected XSS

The Simple:Press Forum WordPress plugin before 6.10.11 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting...

PT-2025-8668

Name of the Vulnerable Software and Affected Versions Simple Certain Time to Show Content WordPress plugin versions prior to 1.3.1 Description The issue is related to a Reflected Cross-Site Scripting problem. It occurs because a parameter is not properly sanitised and escaped before being outputt...

PT-2025-8680 · WordPress · Simple Catalogue

Name of the Vulnerable Software and Affected Versions: Simple catalogue WordPress plugin versions 1.0.0 through 1.0.2 Description: The issue is related to a Reflected Cross-Site Scripting problem, where a parameter is not properly sanitised and escaped before being outputted back in the page. Thi...

PT-2025-8681 · WordPress · Sync Posts

Name of the Vulnerable Software and Affected Versions: Post Sync WordPress plugin version 1.1 Description: The issue is related to a Reflected Cross-Site Scripting problem. It occurs because a parameter is not properly sanitised and escaped before being outputted back in the page. This could be...

PT-2025-8669 · WordPress · Simple:Press Forum

Name of the Vulnerable Software and Affected Versions: Simple:Press Forum versions prior to 6.10.11 Description: The issue arises from the failure to sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting error. This allows malicious...

PT-2025-8679 · WordPress · Wp Extra Fields

Name of the Vulnerable Software and Affected Versions: WP Extra Fields WordPress plugin version 1.0.1 Description: The issue is related to a Reflected Cross-Site Scripting problem, where a parameter is not properly sanitised and escaped before being outputted back in the page. This could be used...

CVE-2024-10483: Improper Neutralization of Input During Web Page Generation

The Simple:Press Forum WordPress plugin before 6.10.11 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting...