CVE-2025-53701

Vilar VS-IPC1002 IP cameras are vulnerable to Reflected XSS Cross-site Scripting attacks, because parameters in GET requests sent to /cgi-bin/action endpoint are not sanitized properly, making it possible to target logged in admin users. The vendor did not respond in any way. Only version 1.1.0.1...

EUVD-2025-35474

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in appscreo Hello Followers hellofollowers allows Reflected XSS.This issue affects Hello Followers: from n/a through = 2.5...

EUVD-2025-35453

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Arevico WP Tactical Popup wp-tactical-popup allows Reflected XSS.This issue affects WP Tactical Popup: from n/a through = 1.1...

EUVD-2025-35489

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Igor Benic Pets pets allows Reflected XSS.This issue affects Pets: from n/a through = 1.4.1...

EUVD-2025-35486

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Activity Track Uji Countdown uji-countdown allows Reflected XSS.This issue affects Uji Countdown: from n/a through = 2.3.3...

EUVD-2025-35507

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in mithra62 WP-Click-Tracker wp-click-track allows Reflected XSS.This issue affects WP-Click-Tracker: from n/a through = 0.7.3...

CVE-2025-59004

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in pco58 WC Return products wc-return-product allows Reflected XSS.This issue affects WC Return products: from n/a through = 1.5...

CVE-2025-53420

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in VibeThemes WPLMS wplmsplugin allows Reflected XSS.This issue affects WPLMS: from n/a through = 1.9.9.8...

CVE-2025-53352

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in G5Theme Grid Plus grid-plus allows Reflected XSS.This issue affects Grid Plus: from n/a through = 3.3...

CVE-2025-52741

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Barry Kooij Post Connector post-connector allows Reflected XSS.This issue affects Post Connector: from n/a through = 1.0.11...

CVE-2025-52736

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Daman Jeet Finale Lite finale-woocommerce-sales-countdown-timer-discount allows Reflected XSS.This issue affects Finale Lite: from n/a through = 2.20.0...

CVE-2025-49930

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Crocoblock JetSearch jet-search allows Reflected XSS.This issue affects JetSearch: from n/a through = 3.5.10...

CVE-2025-48097

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Shiva WSAnalytics wsanalytics-google-analytics-and-dashboards allows Reflected XSS.This issue affects WSAnalytics: from n/a through = 1.1.2...

CVE-2025-53420

CVE-2025-53420 affects WordPress WPLMS plugin versions up to 1.9.9.8. The issue is a Reflected XSS caused by improper neutralization of input during web page generation. Impact per CVSS shows HIGH severity (7.1) with low confidentiality, integrity, and availability impacts. The vulnerability deta...

CVE-2025-52760

CVE-2025-52760 is a reflected Cross-Site Scripting (XSS) vulnerability in the WordPress plugin MultiSite Clone Duplicator (versions

CVE-2025-52753 WordPress Contact Form by Supsystic plugin <= 1.7.36 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in supsystic Contact Form by Supsystic contact-form-by-supsystic allows Reflected XSS.This issue affects Contact Form by Supsystic: from n/a through = 1.7.36...

CVE-2025-52750

CVE-2025-52750 affects the WordPress Emu2 plugin (emu2-email-users-2) up to version 0.83b. The issue is a Reflected Cross-Site Scripting (XSS) vulnerability caused by improper neutralization of input during web page generation. Affected component is the emu2-email-users-2 feature within Emu2; exp...

CVE-2025-52742

The CVE-2025-52742 entry covers a WordPress Pets plugin vulnerability (versions through 1.4.1) that allows Reflected Cross-Site Scripting due to improper input neutralization during web page generation. Affected product: WordPress Pets (plugin)

CVE-2025-49963 WordPress Simple Stripe Checkout plugin <= 1.1.28 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in growniche Simple Stripe Checkout simple-stripe-checkout allows Reflected XSS.This issue affects Simple Stripe Checkout: from n/a through = 1.1.28...

CVE-2025-49963

CVE-2025-49963 concerns the WordPress plugin Simple Stripe Checkout (growniche) versions up to and including 1.1.28. The issue is a Reflected XSS caused by Improper Neutralization of Input During Web Page Generation, enabling attacker-injected scripts to be executed in views of affected pages. Th...