CVE-2025-30913

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in podpirate Access Areas wp-access-areas allows Reflected XSS.This issue affects Access Areas: from n/a through = 1.5.19...

CVE-2025-31085

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Michel - xiligroup dev xili-language xili-language allows Reflected XSS.This issue affects xili-language: from n/a through = 2.21.2...

CVE-2025-30844

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Bob Watu Quiz watu allows Reflected XSS.This issue affects Watu Quiz: from n/a through = 3.4.2...

CVE-2025-30852

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in emotionalonlinestorytelling Oracle Cards Lite oracle-cards allows Reflected XSS.This issue affects Oracle Cards Lite: from n/a through = 1.2.1...

CVE-2025-30778

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Vikas Ratudi VPSUForm v-form allows Reflected XSS.This issue affects VPSUForm: from n/a through = 3.1.9...

CVE-2025-30554

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Abhishek Kumar Frizzly frizzly allows Reflected XSS.This issue affects Frizzly: from n/a through = 1.1.0...

CVE-2025-31568 WordPress LeadLab by wiredminds plugin <= 1.3 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in wiredmindshelp LeadLab by wiredminds wiredminds-leadlab allows Reflected XSS.This issue affects LeadLab by wiredminds: from n/a through = 1.3...

CVE-2025-31578 WordPress Fonts Manager | Custom Fonts plugin <= 1.2 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Wisdomlogix Solutions Pvt. Ltd. Fonts Manager | Custom Fonts fonts-manager-custom-fonts allows Reflected XSS.This issue affects Fonts Manager | Custom Fonts: from n/a through = 1.2...

CVE-2025-31578 WordPress Fonts Manager | Custom Fonts plugin <= 1.2 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Wisdomlogix Solutions Pvt. Ltd. Fonts Manager | Custom Fonts fonts-manager-custom-fonts allows Reflected XSS.This issue affects Fonts Manager | Custom Fonts: from n/a through = 1.2...

CVE-2025-31568

CVE-2025-31568 affects LeadLab by wiredminds (WordPress plugin). It is a Reflected XSS vulnerability in LeadLab input during web page generation. Affected versions: from n/a through 1.3. CVSSv3.1 base score 7.1 (HIGH) with Network attack vector, no privileges required, user interaction needed, co...

CVE-2025-31462 WordPress CGM Event Calendar plugin <= 0.8.5 - Cross Site Scripting (XSS) Vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in rzfarrell CGM Event Calendar cgm-event-calendar allows Reflected XSS.This issue affects CGM Event Calendar: from n/a through = 0.8.5...

CVE-2025-31445 WordPress Pages Order plugin <= 1.1.3 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Sed Lex Pages Order pages-order allows Reflected XSS.This issue affects Pages Order: from n/a through = 1.1.3...

CVE-2025-31454 WordPress Delete Post Revision plugin <= 1.1 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Arefly Delete Post Revision delete-post-revision allows Reflected XSS.This issue affects Delete Post Revision: from n/a through = 1.1...

CVE-2025-31086

CVE-2025-31086 affects the WordPress plugin Product Table by WBW . The vulnerability is a reflected XSS caused by improper neutralization of input during web page generation. Affected versions are listed as up to 2.1.4 (n/a through 2.1.4). The CVSSv3.1 base metrics cite a 7.1 HIGH score with netw...

CVE-2025-31441 WordPress WordPress Galleria plugin <= 1.4 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in S WordPress Galleria wp-galleria allows Reflected XSS.This issue affects WordPress Galleria: from n/a through = 1.4...

CVE-2025-31441

CVE-2025-31441 describes a Reflected XSS in the WordPress Galleria plugin (wp-galleria). Public description states affected product: WordPress Galleria (wp-galleria), with vulnerable versions listed as from n/a through

CVE-2025-31078

CVE-2025-31078 (Small Package Quotes – Worldwide Express Edition) is a reflected XSS vulnerability in that WordPress plugin, affecting versions up to 5.2.18. Exploitation would involve crafted input reflected in a web page, enabling an attacker to inject script when a victim visits the page. The ...

CVE-2025-30913 WordPress Access Areas Plugin <= 1.5.19 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in podpirate Access Areas wp-access-areas allows Reflected XSS.This issue affects Access Areas: from n/a through = 1.5.19...

CVE-2025-30906

CVE-2025-30906 : Reflected Cross-Site Scripting in the WordPress plugin “Plugin Oficial – Getnet para WooCommerce”; affected versions are up to 1.7.3 (no vendor versioning details provided). Patch status is listed as Patched in referenced sources.

CVE-2025-30906 WordPress Plugin Oficial – Getnet para WooCommerce plugin <= 1.7.3 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in lisandragetnet Plugin Oficial – Getnet para WooCommerce wc-checkout-getnet allows Reflected XSS.This issue affects Plugin Oficial – Getnet para WooCommerce: from n/a through = 1.7.3...