CVE-2025-23697 WordPress Podčlánková inzerce plugin <= 2.4.0 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in webdeal Podčlánková inzerce podclankova-inzerce allows Reflected XSS.This issue affects Podčlánková inzerce: from n/a through = 2.4.0...

CVE-2025-23686 WordPress Admin Menu Organizer plugin <= 1.0.1 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Callum Richards Admin Menu Organizer allows Reflected XSS. This issue affects Admin Menu Organizer: from n/a through 1.0.1...

CVE-2025-23695 WordPress CtyGrid Hyp3rL0cal Search plugin <= 0.1.1.1 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in kinlane CtyGrid Hyp3rL0cal Search hyp3rl0cal-city-search allows Reflected XSS.This issue affects CtyGrid Hyp3rL0cal Search: from n/a through = 0.1.1.1...

CVE-2025-23683

CVE-2025-23683 is a Reflected XSS in MACME NotFound for WordPress (NotFound MACME), affecting versions up to 1.2. Root cause: improper input neutralization during web page generation. Public details across connected documents confirm the vulnerability and affected plugin, but no patch/version det...

CVE-2025-23682 WordPress Preloader Quotes plugin <= 1.0.0 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Bhuvnesh Gupta Preloader Quotes preloader-quotes allows Reflected XSS.This issue affects Preloader Quotes: from n/a through = 1.0.0...

CVE-2025-23682

CVE-2025-23682 is an XSS vulnerability described as a reflected cross-site scripting issue in the NotFound Preloader Quotes plugin for WordPress, allowing injection during web page generation. Public description indicates the affected plugin is “Preloader Quotes” with versions from n/a up to 1.0....

CVE-2025-23679 WordPress FP RSS Category Excluder plugin <= 1.0.0 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Moshiur Rahman Mehedi FP RSS Category Excluder allows Reflected XSS. This issue affects FP RSS Category Excluder: from n/a through 1.0.0...

CVE-2025-23679

CVE-2025-23679 pertains to FP RSS Category Excluder (WordPress plugin). It is a reflected XSS via improper neutralization during web page generation, affecting FP RSS Category Excluder versions from 0 through 1.0.0. The connected Red Hat entry reiterates the same description; no vendor-specific f...

CVE-2025-23682 WordPress Preloader Quotes plugin <= 1.0.0 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in NotFound Preloader Quotes allows Reflected XSS. This issue affects Preloader Quotes: from n/a through 1.0.0...

CVE-2025-23611

CVE-2025-23611 is a Reflected XSS in NotFound WH Cache & Security (WordPress plugin WH Cache & Security) affecting versions from n/a up to 1.1.2. The Red Hat advisory confirms the same vulnerability in the same product. No public exploit details or remediation are provided in the connected docume...

CVE-2025-23625 WordPress Unique UX plugin <= 0.9.2 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in awcode Unique UX unique-ux allows Reflected XSS.This issue affects Unique UX: from n/a through = 0.9.2...

CVE-2025-23631 WordPress Content Planner plugin <= 1.0 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in NotFound Content Planner allows Reflected XSS. This issue affects Content Planner: from n/a through 1.0...

CVE-2025-23676

CVE-2025-23676 affects LH Email (WordPress LH Email plugin). The Red Hat advisory notes an Improper Neutralization of Input leading to Reflected XSS in LH Email up to version 1.12. The vulnerability is described as Reflected XSS in LH Email with unpatched status per the LH Email entry. Connected ...

CVE-2025-23630 WordPress Cyber Slider plugin <= 1.1 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in NotFound Cyber Slider allows Reflected XSS. This issue affects Cyber Slider: from n/a through 1.1...

CVE-2025-23674 WordPress Bit.ly linker plugin <= 1.1 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in NotFound Bit.ly linker allows Reflected XSS. This issue affects Bit.ly linker: from n/a through 1.1...

CVE-2025-23630

CVE-2025-23630 corresponds to Cyber Slider (NotFound Cyber Slider). Connected data confirms a Reflected Cross-Site Scripting (XSS) vulnerability in Cyber Slider up to version 1.1, caused by improper input neutralization during web page generation. Public status indicates patch/fix is not yet avai...

CVE-2025-23672

CVE-2025-23672 is a reflected XSS vulnerability in Instant Appointment (NotFound Instant Appointment) affecting versions up to 1.2. The issue arises from improper input neutralization during web page generation. The CVE entry notes Reflected XSS; connected Red Hat and Wordfence references corrobo...

CVE-2025-23610 WordPress Ultimate Events plugin <= 1.3.3 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in NotFound Ultimate Events allows Reflected XSS. This issue affects Ultimate Events: from n/a through 1.3.3...

CVE-2025-23606

CVE-2025-23606 pertains to Calendi (NotFound) and is a Reflected XSS vulnerability arising from improper neutralization of input during web page generation. Affected range is Calendi versions from n/a up to 1.1.1. Red Hat/Wordfence references corroborate the CVE-2025-23606 entry and describe the ...

CVE-2025-23606 WordPress Calendi plugin <= 1.1.1 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in sebkay Calendi calendi allows Reflected XSS.This issue affects Calendi: from n/a through = 1.1.1...