CVE-2025-27278

CVE-2025-27278 affects NotFound AcuGIS Leaflet Maps Plugin for WordPress (

CVE-2025-27278 WordPress AcuGIS Leaflet Maps Plugin <= 5.1.1.0 - Multiple Cross Site Scripting (XSS) vulnerabilities

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in David Ghedini AcuGIS Leaflet Maps mapfig-premium-leaflet-map-maker allows Reflected XSS.This issue affects AcuGIS Leaflet Maps: from n/a through = 5.1.1.0...

CVE-2025-27273

CVE-2025-27273 affects the WordPress plugin “Affiliate Links Manager” (versions up to 1.0). The connected sources confirm a Reflected Cross-Site Scripting vulnerability arising from improper input neutralization during web page generation. The CVSS 3.1 score is 5.8 (Medium) with impact on confide...

CVE-2025-27275

CVE-2025-27275 describes a Reflected XSS in the WordPress plugin WOO Codice Fiscale by andrew_fisher, affecting versions from n/a through 1.6.3. The vulnerability is categorized as a cross-site scripting flaw that can be triggered via input during web page generation; CVSSv3.1 vector (AV:N/AC:L/P...

CVE-2025-27269

CVE-2025-27269 relates to the WordPress plugin “.htaccess Login block” (vulnerable:

CVE-2025-27271

CVE-2025-27271 is a Reflected XSS in the WordPress plugin “DB Tables Import/Export” affecting version range from n/a through 1.0.1. The description identifies improper input neutralization during web page generation as the root cause. Multiple connected sources corroborate the same vulnerability ...

CVE-2025-27275 WordPress WOO Codice Fiscale plugin <= 1.6.3 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in andrewfisher WOO Codice Fiscale woo-codice-fiscale allows Reflected XSS.This issue affects WOO Codice Fiscale: from n/a through = 1.6.3...

CVE-2025-26589 WordPress IE CSS3 Support Plugin <= 2.0.1 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Cristopher Dino IE CSS3 Support ie-css3-support allows Reflected XSS.This issue affects IE CSS3 Support: from n/a through = 2.0.1...

CVE-2025-26588

CVE-2025-26588 describes a reflected Cross-Site Scripting (XSS) vulnerability in the WordPress plugin TTT Crop . The Initial Description specifies a Reflected XSS affecting “NotFound TTT Crop” from n/a through 1.0. Connected documents corroborate the issue as a Reflected Cross Site Scripting vuln...

CVE-2025-26589

CVE-2025-26589 concerns the WordPress plugin IE CSS3 Support (

CVE-2025-26589 WordPress IE CSS3 Support Plugin <= 2.0.1 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Cristopher Dino IE CSS3 Support ie-css3-support allows Reflected XSS.This issue affects IE CSS3 Support: from n/a through = 2.0.1...

CVE-2025-26587

CVE-2025-26587 is a Reflected Cross-Site Scripting vulnerability in WordPress sidebarTabs

CVE-2025-26563 WordPress Rocket Mobile Plugin <= 0.4.2 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in NotFound Mobile allows Reflected XSS. This issue affects Mobile: from n/a through 1.3.3...

CVE-2025-26585

CVE-2025-26585 — WordPress plugin DL Leadback is affected by a Reflected Cross-Site Scripting (XSS) vulnerability in versions up to 1.2.1 due to improper input neutralization during web page generation. Public sources (NVD/Red Hat/CVE listings) describe the flaw as DL Leadback: notcapped escalati...

CVE-2025-26557

CVE-2025-26557 corresponds to a reported Reflected Cross-Site Scripting vulnerability in the WordPress ViperBar plugin, affecting versions up to 2.0. The issue is described as an improper neutralization of input during web page generation, enabling reflected XSS. Reported impact and scoring are p...

CVE-2025-26585 WordPress DL Leadback Plugin <= 1.2.1 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in DyadyaLesha DL Leadback dl-leadback allows Reflected XSS.This issue affects DL Leadback: from n/a through = 1.2.1...

CVE-2025-26586

CVE-2025-26586 corresponds to a WordPress plugin issue: WordPress Events Planner

CVE-2025-26563 WordPress Rocket Mobile Plugin <= 0.4.2 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Muneeb Mobile rocket-wp-mobile allows Reflected XSS.This issue affects Mobile: from n/a through = 1.3.3...

CVE-2025-26557 WordPress ViperBar Plugin <= 2.0 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in viperchill ViperBar viperbar allows Reflected XSS.This issue affects ViperBar: from n/a through = 2.0...

CVE-2025-26563

CVE-2025-26563 is described as a Reflected XSS in the WordPress Mobile/NotFound (NotFound Mobile) plugin, with the NotFound Mobile variant affected up to version 1.3.3. The CVE entry cites an improper input handling during web page generation as the root cause, enabling cross-site scripting. The ...