CVE-2025-39372 WordPress WordPress Events Calendar Registration & Tickets plugin <= 2.6.0 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in elbisnero WordPress Events Calendar Registration & Tickets wpeventplus allows Reflected XSS.This issue affects WordPress Events Calendar Registration & Tickets: from n/a through = 2.6.0...

CVE-2025-39392 WordPress WPAMS plugin <= 44.0 (17-08-2023) - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in mojoomla WPAMS apartment-management allows Reflected XSS.This issue affects WPAMS: from n/a through = 44.0 17-08-2023...

CVE-2025-39392

CVE-2025-39392 : Reflected XSS in WPAMS (WordPress Apartment Management System) plugin for WordPress, affecting versions up to 44.0 (as of 17-08-2023). Root cause: improper neutralization of input during web page generation. Exploitation details are not provided in the connected documents. Remedi...

CVE-2025-39392 WordPress WPAMS plugin <= 44.0 (17-08-2023) - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in mojoomla WPAMS apartment-management allows Reflected XSS.This issue affects WPAMS: from n/a through = 44.0 17-08-2023...

CVE-2025-39393 WordPress Hospital Management System plugin <= 47.0 (20-11-2023) - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in mojoomla Hospital Management System allows Reflected XSS.This issue affects Hospital Management System: from n/a through 47.0 20-11-2023...

CVE-2025-43839

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in shanebp BP Messages Tool bp-messages-tool allows Reflected XSS.This issue affects BP Messages Tool: from n/a through = 2.2...

CVE-2025-43832

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in andreyk Remote Images Grabber remote-images-grabber allows Reflected XSS.This issue affects Remote Images Grabber: from n/a through = 0.6...

CVE-2025-39407

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Caseproof, LLC Memberpress allows Reflected XSS.This issue affects Memberpress: from n/a before 1.12.0...

CVE-2025-39407

CVE-2025-39407: Reflected XSS in WordPress Memberpress plugin (Caseproof) affecting versions before 1.12.0. Root cause is improper input neutralization during web page generation. Impact includes potential data/ session exposure via attacker-controlled input; CVSS v3.1 base score 7.1 (HIGH), with...

CVE-2025-43832

CVE-2025-43832 affects the WordPress Remote Images Grabber plugin (versions up to 0.6). It is a Reflected Cross-Site Scripting (XSS) vulnerability caused by improper input neutralization during web page generation. The CVE entry and connected sources confirm the vulnerability and affected feature...

CVE-2025-43836 WordPress Syndicate Out <= 0.9 - Cross Site Scripting (XSS) Vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in confuzzledduck Syndicate Out syndicate-out allows Reflected XSS.This issue affects Syndicate Out: from n/a through = 0.9...

CVE-2025-43836

CVE-2025-43836 affects the WordPress plugin Syndicate Out (versions n/a–0.9). The issue is an Improper Neutralization of Input During Web Page Generation leading to a Cross-Site Scripting (XSS) vulnerability (type: stored/reflected according to sources), enabling an attacker to inject script that...

CVE-2025-43837 WordPress Total Donations <= 3.0.8 - Cross Site Scripting (XSS) Vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in binti76 Total Donations total-donations allows Reflected XSS.This issue affects Total Donations: from n/a through = 3.0.8...

CVE-2025-43837

CVE-2025-43837 is a Cross-Site Scripting (XSS) vulnerability in the WordPress plugin WordPress Total Donations, reported for versions 3.0.8 and earlier. The issue stems from improper neutralization of input during web page generation, enabling a reflected XSS attack. Publicly documented impact in...

CVE-2025-43837 WordPress Total Donations <= 3.0.8 - Cross Site Scripting (XSS) Vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in binti76 Total Donations allows Reflected XSS.This issue affects Total Donations: from n/a through 3.0.8...

CVE-2025-43839

The CVE-2025-43839 entry pertains to the WordPress BP Messages Tool plugin (versions up to 2.2) and describes a reflected Cross-Site Scripting (XSS) vulnerability caused by improper input handling during web page generation. CVSS v3.1 base score is 7.1 (HIGH) with network attack vector, required ...

CVE-2025-43839 WordPress BP Messages Tool plugin <= 2.2 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in shanebp BP Messages Tool bp-messages-tool allows Reflected XSS.This issue affects BP Messages Tool: from n/a through = 2.2...

CVE-2025-26997

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in validas Wireless Butler wireless-butler allows Reflected XSS.This issue affects Wireless Butler: from n/a through = 1.0.11...

CVE-2025-26997 WordPress Wireless Butler plugin <= 1.0.11 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in validas Wireless Butler wireless-butler allows Reflected XSS.This issue affects Wireless Butler: from n/a through = 1.0.11...

CVE-2025-26997

Wireless Butler (WordPress plugin) is reported to be vulnerable to Reflected XSS due to improper input neutralization during web page generation. Affected versions are 1.0.11 and earlier; CVSS v3.1 base score 7.1 ( HIGH ). Connected sources confirm the vulnerability and affected range but do not ...