CVE-2025-26576

CVE-2025-26576 : Reflected XSS in the WordPress plugin WP Simple Slideshow (affected:

CVE-2025-26581

CVE-2025-26581 affects WordPress Picture Gallery (plugin) vulnerable through improper input handling in web page generation, enabling Cross-site Scripting (XSS). The NVD entry describes a Reflected XSS outcome with CVSS 3.1 base score 7.1 (HIGH) and network access with user interaction required. ...

CVE-2025-26579

CVE-2025-26579 affects WordPress MicroPayments plugin (WordPress) with a Reflected XSS due to improper input neutralization during page generation. Impact is Reflected Cross‑Site Scripting in MicroPayments from versions n/a through 3.1.6. The issue is publicly documented; Patchstack notes a fix i...

CVE-2025-26573 WordPress Rizzi Guestbook plugin <= 4.0.1 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in JamRizzi Technologies Rizzi Guestbook rizzi-guestbook allows Reflected XSS.This issue affects Rizzi Guestbook: from n/a through = 4.0.1...

CVE-2025-26573 WordPress Rizzi Guestbook plugin <= 4.0.1 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in NotFound Rizzi Guestbook allows Reflected XSS. This issue affects Rizzi Guestbook: from n/a through 4.0.1...

CVE-2025-26564

CVE-2025-26564 affects the WordPress GNUCommerce plugin (versions

CVE-2025-26573

CVE-2025-26573 describes a Reflected XSS in the WordPress Rizzi Guestbook plugin (versions

CVE-2025-26559 WordPress Secure Invites plugin <= 1.2.5 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Chris Taylor Secure Invites wordpress-mu-secure-invites allows Reflected XSS.This issue affects Secure Invites: from n/a through = 1.3...

CVE-2025-26565

CVE-2025-26565 affects GNUPress WordPress Plugin, versions up to 0.2.9. It is a Reflected Cross‑Site Scripting (XSS) vulnerability arising from improper neutralization of input during web page generation. CVSS v3.1 base score is 7.1 (HIGH) with network attack vector, no privileges required, user ...

CVE-2025-26566

CVE-2025-26566 – NotFound In Stock Mailer for WooCommerce is a Reflected Cross-Site Scripting (XSS) vulnerability in the WordPress plugin In Stock Mailer for WooCommerce, affecting versions up to 2.1.1. The issue arises from improper input neutralization during web page generation, enabling refle...

CVE-2025-26560 WordPress WP Contact Form III Plugin <= 1.6.2d - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in KKWangen WP Contact Form III wp-contact-form-iii allows Reflected XSS.This issue affects WP Contact Form III: from n/a through = 1.6.2d...

CVE-2025-26560

CVE-2025-26560 describes a Reflected XSS in the WordPress plugin WP Contact Form III (notFound WP Contact Form III) affecting versions up to 1.6.2d. The root cause is improper input neutralization during web page generation. The connected Red Hat/Reddit Wordfence entries corroborate the vulnerabi...

CVE-2025-26564 WordPress GNUCommerce Plugin <= 1.5.4 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in kagla GNUCommerce gnucommerce allows Reflected XSS.This issue affects GNUCommerce: from n/a through = 1.5.4...

CVE-2025-26546 WordPress Cookies Pro plugin <= 1.0 - CSRF to Stored XSS vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Pixelpro Cookies Pro cookies-pro allows Reflected XSS.This issue affects Cookies Pro: from n/a through = 1.0...

CVE-2025-26546 WordPress Cookies Pro plugin <= 1.0 - CSRF to Stored XSS vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in NotFound Cookies Pro allows Reflected XSS. This issue affects Cookies Pro: from n/a through 1.0...

CVE-2025-26542 WordPress Zalo Live Chat Plugin <= 1.1.0 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in NotFound Zalo Live Chat allows Reflected XSS. This issue affects Zalo Live Chat: from n/a through 1.1.0...

CVE-2025-26541

CVE-2025-26541 affects the WordPress plugin Bitcoin / AltCoin Payment Gateway for WooCommerce (and Multivendor store)

CVE-2025-26546

CVE-2025-26546: A CSRF to Stored XSS vulnerability in WordPress Cookies Pro (versions

CVE-2025-25134 WordPress Theme Demo Bar Plugin <= 1.6.3 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in zenverse Theme Demo Bar wordpress-theme-demo-bar allows Reflected XSS.This issue affects Theme Demo Bar: from n/a through = 1.6.3...

CVE-2025-26536

CVE-2025-26536 in WordPress plugin Another Events Calendar (versions &lt;= 1.7.0) is a Reflected XSS vulnerability caused by improper input handling during web page generation. The CVSS v3.1 vector is CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L with a base score of 7.1 (HIGH). This entry’s conne...