CVE-2025-27293

The CVE-2025-27293 entry concerns the WordPress plugin Shipmozo Courier Tracking (Shipmozo Courier Tracking). The vulnerability is an improper input neutralization that enables a Reflected Cross-Site Scripting (XSS) attack in the plugin, affecting versions from n/a up to 1.0. The CVSS vector is C...

CVE-2025-27308

CVE-2025-27308 : WordPress WP Video Posts plugin is affected (versions up to 3.5.1) by a Reflected Cross-Site Scripting vulnerability caused by improper neutralization of input during web page generation. Public details consistently reference WP Video Posts in this CVE; exploitation status and fi...

CVE-2025-27308 WordPress WP Video Posts plugin <= 3.5.1 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in cmstactics WP Video Posts wp-video-posts allows Reflected XSS.This issue affects WP Video Posts: from n/a through = 3.5.1...

CVE-2025-27313 WordPress Google Maps GPX Viewer Plugin <= 3.6 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Bernd Altmeier Google Maps GPX Viewer google-maps-gpx-viewer allows Reflected XSS.This issue affects Google Maps GPX Viewer: from n/a through = 3.6...

CVE-2025-27319 WordPress User List plugin <= 1.5.1 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in ivan82 User List user-list allows Reflected XSS.This issue affects User List: from n/a through = 1.5.1...

CVE-2025-27319 WordPress User List plugin <= 1.5.1 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in ivan82 User List user-list allows Reflected XSS.This issue affects User List: from n/a through = 1.5.1...

CVE-2025-27319

CVE-2025-27319 is a Reflected XSS in the WordPress User List plugin (affected: versions n/a to 1.5.1). Root cause: improper input neutralization during web page generation. Impact per available data: potential script execution in the context of a user viewing affected pages; CVSSv3.1 base 7.1 (AV...

CVE-2025-27322 WordPress QR Code for WooCommerce Plugin <= 1.2.0 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Bappa Mal QR Code for WooCommerce wc-qr-codes allows Reflected XSS.This issue affects QR Code for WooCommerce: from n/a through = 1.2.0...

CVE-2025-27324 WordPress 17TRACK for WooCommerce Plugin <= 1.2.10 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in 17track 17TRACK for WooCommerce 17track allows Reflected XSS.This issue affects 17TRACK for WooCommerce: from n/a through = 1.2.10...

CVE-2025-27343 WordPress WooCommerce HTML5 Video Plugin <= 1.7.10 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Webilop WooCommerce HTML5 Video woocommerce-html5-video allows Reflected XSS.This issue affects WooCommerce HTML5 Video: from n/a through = 1.7.10...

CVE-2025-27345 WordPress Booking Ultra Pro Plugin <= 1.1.19 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Deetronix Booking Ultra Pro booking-ultra-pro allows Reflected XSS.This issue affects Booking Ultra Pro: from n/a through = 1.1.19...

CVE-2025-27345 WordPress Booking Ultra Pro Plugin <= 1.1.19 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Deetronix Booking Ultra Pro booking-ultra-pro allows Reflected XSS.This issue affects Booking Ultra Pro: from n/a through = 1.1.19...

CVE-2025-27346

CVE-2025-27346 concerns a Reflected XSS in the WordPress plugin Rebuild Permalinks (builds/permalink generation). The vulnerability targets the plugin’s rebuild-permalinks flow and is described as an improper neutralization of input during web page generation. Affected scope: Rebuild Permalinks v...

CVE-2025-27346 WordPress Rebuild Permalinks Plugin <= 1.6 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in gerrygooner Rebuild Permalinks rebuild-permalinks allows Reflected XSS.This issue affects Rebuild Permalinks: from n/a through = 1.6...

CVE-2025-27354

CVE-2025-27354 affects WordPress plugin Simple Email Subscriber (versions n/a–2.3). All connected sources confirm a Cross-Site Scripting (Reflected XSS) flaw arising from improper input neutralization during web page generation. The CVE description states the issue as a Reflected XSS vulnerabilit...

CVE-2025-31018

The CVE-2025-31018 entry describes a Reflected Cross-Site Scripting (XSS) vulnerability in the WordPress plugin FireDrum Email Marketing, affecting versions from n/a through 1.64. The vulnerability is categorized under Improper Neutralization of Input During Web Page Generation. CVSS v3.1 metrics...

CVE-2025-32506

CVE-2025-32506 describes a Reflected XSS in the WordPress plugin AT Internet SmartTag (AT Internet SmartTag) with affected version range shown as from n/a through 0.2. The vulnerability is due to improper neutralization of input during web page generation. NVD metrics cite CVSSv3.1 base score 7.1...

CVE-2025-32507

CVE-2025-32507 is a reflected Cross‑Site Scripting (XSS) vulnerability in the WordPress plugin “Event Espresso – Custom Email Template Shortcode.” It arises from improper input neutralization during web page generation and affects versions up to 1.0.0. The CVSS 3.1 vector indicates attack require...

CVE-2025-32511 WordPress Make Email Customizer for WooCommerce plugin <= 1.0.6 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Excellent Dynamics Make Email Customizer for WooCommerce make-email-customizer-for-woocommerce allows Reflected XSS.This issue affects Make Email Customizer for WooCommerce: from n/a through = 1.0....

CVE-2025-32512 WordPress Revamp CRM for WooCommerce plugin <= 1.1.2 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in revampcrm Revamp CRM for WooCommerce revampcrm-woocommerce allows Reflected XSS.This issue affects Revamp CRM for WooCommerce: from n/a through = 1.1.2...