CVE-2025-39478

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in smartiolabs Smart Notification allows Reflected XSS. This issue affects Smart Notification: from n/a through 10.3...

CVE-2025-31428

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in BuddhaThemes HYDRO hydro allows Reflected XSS.This issue affects HYDRO: from n/a through = 2.8...

CVE-2025-28956

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in wphobby Backwp backwp allows Reflected XSS.This issue affects Backwp: from n/a through = 2.0.2...

CVE-2025-28988

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in aharonyan WP Front User Submit / Front Editor front-editor allows Reflected XSS.This issue affects WP Front User Submit / Front Editor: from n/a through = 4.9.3...

CVE-2025-24774

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in mojoomla WPCRM - CRM for Contact form CF7 & WooCommerce wpcrm allows Reflected XSS.This issue affects WPCRM - CRM for Contact form CF7 & WooCommerce: from n/a through = 3.2.0...

CVE-2025-27361

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in thhake Photo Express for Google photo-express-for-google allows Reflected XSS.This issue affects Photo Express for Google: from n/a through = 0.3.2...

CVE-2025-24774 WordPress WPCRM - CRM for Contact form CF7 & WooCommerce plugin <= 3.2.0 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in mojoomla WPCRM - CRM for Contact form CF7 & WooCommerce wpcrm allows Reflected XSS.This issue affects WPCRM - CRM for Contact form CF7 & WooCommerce: from n/a through = 3.2.0...

CVE-2025-24774 WordPress WPCRM - CRM for Contact form CF7 & WooCommerce plugin <= 3.2.0 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in mojoomla WPCRM - CRM for Contact form CF7 & WooCommerce allows Reflected XSS. This issue affects WPCRM - CRM for Contact form CF7 & WooCommerce: from n/a through 3.2.0...

CVE-2025-27361 WordPress Photo Express for Google plugin <= 0.3.2 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in thhake Photo Express for Google photo-express-for-google allows Reflected XSS.This issue affects Photo Express for Google: from n/a through = 0.3.2...

CVE-2025-28960

CVE-2025-28960 : The Evangelische Termine WordPress plugin (regibaer) has a reflected XSS due to improper input neutralization during web page generation. Affected versions are n/a through 3.3. CVSS v3.1 base score 7.1 (HIGH). Exploitation status and patch availability are not detailed in the pro...

CVE-2025-28956

Backwp (WordPress Backwp plugin) is affected by CVE-2025-28956: a Reflected Cross-Site Scripting vulnerability due to improper input neutralization during web page generation. Affected versions: n/a through 2.0.2. The CVSS data indicates a high-severity impact (7.1) with Network attack vector, re...

CVE-2025-28988

CVE-2025-28988 is a reflected Cross-Site Scripting (XSS) in the WordPress plugin WP Front User Submit / Front Editor, affecting versions up to 4.9.3. The issue stems from improper input neutralization during web page generation, enabling a reflected XSS that requires user interaction and has CVSS...

CVE-2025-39478 WordPress Smart Notification Plugin <= 10.3 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in smartiolabs Smart Notification allows Reflected XSS. This issue affects Smart Notification: from n/a through 10.3...

CVE-2025-39488 WordPress MagOne theme <= 8.5 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Sneeit MagOne allows Reflected XSS. This issue affects MagOne: from n/a through 8.5...

CVE-2025-47574

CVE-2025-47574 involves WordPress School Management Plugin versions n/a through 92.0.0 and is described as a Reflected Cross‑Site Scripting (XSS) vulnerability caused by improper input neutralization during web page generation. Reports from NVD/Red Hat/Patchstack identify this as a Reflected XSS ...

CVE-2025-47654

CVE-2025-47654 affects WordPress FormLift for Infusionsoft Web Forms (plugin) up to version 7.5.20. The vulnerability is a Reflected Cross-Site Scripting (XSS) due to improper input neutralization during web page generation. Impact is reflected XSS on affected sites. Remediation: upgrade FormLift...

CVE-2025-47654 WordPress FormLift for Infusionsoft Web Forms plugin <= 7.5.20 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Adrian Tobey FormLift for Infusionsoft Web Forms allows Reflected XSS. This issue affects FormLift for Infusionsoft Web Forms: from n/a through 7.5.20...

CVE-2025-47574 WordPress School Management System Plugin <= 92.0.0 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in mojoomla School Management allows Reflected XSS. This issue affects School Management: from n/a through 92.0.0...

CVE-2025-49290

CVE-2025-49290 describes a Reflected Cross-Site Scripting flaw in the WordPress plugin Off-Canvas Sidebars & Menus (Slidebars)

CVE-2025-49290 WordPress Off-Canvas Sidebars & Menus (Slidebars) plugin <= 0.5.8.4 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Jory Hogeveen Off-Canvas Sidebars & Menus Slidebars allows Reflected XSS. This issue affects Off-Canvas Sidebars & Menus Slidebars: from n/a through 0.5.8.4...