CVE-2025-26997 WordPress Wireless Butler plugin <= 1.0.11 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in validas Wireless Butler wireless-butler allows Reflected XSS.This issue affects Wireless Butler: from n/a through = 1.0.11...

CVE-2025-23983

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in tijaji Tijaji tijaji allows Reflected XSS.This issue affects Tijaji: from n/a through = 1.43...

CVE-2025-22791

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in twh offset writing allows Reflected XSS.This issue affects offset writing: from n/a through 1.2...

CVE-2025-23979

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in duwasai Flashy allows Reflected XSS.This issue affects Flashy: from n/a through 1.2.1...

CVE-2025-23986

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in fyrewurks Tiki Time allows Reflected XSS.This issue affects Tiki Time: from n/a through 1.3...

CVE-2025-22792

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in jinwen Js O3 Lite allows Reflected XSS.This issue affects Js O3 Lite: from n/a through 1.5.8.2...

CVE-2025-23981

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Takimi Themes CarZine allows Reflected XSS.This issue affects CarZine: from n/a through 1.4.6...

CVE-2025-22789

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in fyrewurks polka dots allows Reflected XSS.This issue affects polka dots: from n/a through 1.2...

CVE-2025-22687

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Asmedia Tuaug4 allows Reflected XSS.This issue affects Tuaug4: from n/a through 1.4...

CVE-2025-22678

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in mythemes my white allows Reflected XSS.This issue affects my white: from n/a through 2.0.8...

CVE-2025-23988 WordPress ghostwriter theme <= 1.4 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Bruno Cavalcante Ghostwriter allows Reflected XSS.This issue affects Ghostwriter: from n/a through 1.4...

CVE-2025-23988

The CVE-2025-23988 entry concerns the WordPress Ghostwriter theme (Ghostwriter: from n/a through 1.4) with a Reflected Cross-Site Scripting vulnerability. Public docs describe improper input neutralization during web page generation, enabling reflected XSS. The connected sources confirm the issue...

CVE-2025-23986 WordPress Tiki Time theme <= 1.3 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in fyrewurks Tiki Time allows Reflected XSS.This issue affects Tiki Time: from n/a through 1.3...

CVE-2025-23986

CVE-2025-23986 affects the WordPress Tiki Time theme (fyrewurks) up to version 1.3, with a Reflected XSS caused by improper input neutralization during web page generation. Affected versions include 1.3 and earlier. Remediation is to upgrade to a fixed version (exact patch version not specified i...

CVE-2025-23983 WordPress Tijaji theme <= 1.43 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in tijaji Tijaji tijaji allows Reflected XSS.This issue affects Tijaji: from n/a through = 1.43...

CVE-2025-23981

CVE-2025-23981 corresponds to a WordPress CarZine theme vulnerability: a Reflected Cross-Site Scripting flaw caused by improper input neutralization in CarZine versions up to 1.4.6. This could enable attacker-controlled input to be reflected in web pages, potentially affecting visitors. Affected ...

CVE-2025-23981 WordPress CarZine theme <= 1.4.6 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Takimi Themes CarZine allows Reflected XSS.This issue affects CarZine: from n/a through 1.4.6...

CVE-2025-23979

CVE-2025-23979 is a Reflected XSS in the WordPress Flashy (duwasai Flashy) plugin. Affected: Flashy versions up to 1.2.1 and earlier. Root cause: improper input neutralization during web page generation. Impact: potential script execution via reflected payload; CVSS 3.1 base 7.1 (HIGH); attack ve...

CVE-2025-22792

CVE-2025-22792 applies to WordPress plugin Js O3 Lite (Jinwen Js O3 Lite), with Reflected XSS caused by improper input neutralization during web page generation. Affected: Js O3 Lite ≤ 1.5.8.2. CVSS 3.1 base score 7.1 (HIGH). Remediation: update to a version that includes a fix (no specific fixed...

CVE-2025-22791

CVE-2025-22791 : Reflected XSS in twh offset writing (WordPress theme/plugin “offset writing”); affects versions n/a–1.2. Root cause: improper input handling during web page generation leading to reflected script execution. Public sources (NVD, Red Hat, CVE lists) confirm vulnerability exists; Pa...