16272 matches found
CVE-2025-25161
CVE-2025-25161 concerns the WordPress plugin WP Find Your Nearest (v <= 0.3.1). The connected Red Hat and CVE records describe a CSRF to Settings Change vulnerability that can be exploited to modify plugin settings, implying an unauthorized action may be performed by an attacker authenticated ...
CVE-2025-25157 WordPress WP Church Center Plugin <= 1.3.3 - Reflected Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in NotFound WP Church Center allows Reflected XSS. This issue affects WP Church Center: from n/a through 1.3.3...
CVE-2025-25158 WordPress Uncomplicated SEO plugin <= 1.2 - Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Antonio Sanchez Uncomplicated SEO uncomplicated-seo allows Reflected XSS.This issue affects Uncomplicated SEO: from n/a through = 1.2...
CVE-2025-25157
The CVE-2025-25157 entry concerns the WordPress WP Church Center plugin (versions up to 1.3.3). The vulnerability is a Reflected Cross-Site Scripting (XSS) flaw caused by improper neutralization of input during web page generation. Affected component: WP Church Center plugin; root cause: input no...
CVE-2025-25129 WordPress Callback Request plugin <= 1.4 - Reflected Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in NotFound Callback Request allows Reflected XSS. This issue affects Callback Request: from n/a through 1.4...
CVE-2025-25129
The CVE-2025-25129 entry relates to a WordPress plugin issue: Callback Request (NotFound Callback Request) vulnerability tracked as CVE-2025-25129, affecting versions <= 1.4. The root cause is improper input neutralization during web page generation, enabling reflected cross-site scripting (XS...
CVE-2025-25127
CVE-2025-25127 is a reflected cross-site scripting (XSS) vulnerability affecting WordPress plugin Contact Us By Lord Linus up to version 2.6. The issue arises from improper input neutralization during web page generation, enabling attackers to reflect script payloads via user-supplied input. The ...
CVE-2025-25118
CVE-2025-25118 is a Cross-Site Scripting (XSS) vulnerability in the WordPress plugin WPOptin Top Bar – PopUps, affecting versions up to 2.0.8. The issue is an improper neutralization of input during web page generation, yielding a reflected XSS condition. Affected product: WPOptin – AI-Powered To...
CVE-2025-25119
CVE-2025-25119 is a Cross-Site Scripting vulnerability in the WordPress plugin WooCommerce osCommerce Sync (NotFound)
CVE-2025-25127 WordPress Contact Us By Lord Linus Plugin <= 2.6 - Reflected Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Rohitashv Singhal Contact Us By Lord Linus contact-us-by-lord-linus allows Reflected XSS.This issue affects Contact Us By Lord Linus: from n/a through = 2.6...
CVE-2025-25118 WordPress WPOptin plugin <= 2.0.8 - Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Danish Ali Malik Top Bar – PopUps – by WPOptin wpoptin allows Reflected XSS.This issue affects Top Bar – PopUps – by WPOptin: from n/a through = 2.0.8...
CVE-2025-25124
CVE-2025-25124 affects WordPress Status Updater (plugin versions from n/a through 1.9.2). It is a Reflected XSS due to Improper Neutralization of Input During Web Page Generation. CVSS v3.1 base score 7.1 (HIGH) with NETWORK attack vector and user interaction required. Exploitation status is not ...
CVE-2025-25114
CVE-2025-25114 affects the WordPress plugin WordPress User Roles (WordPress User Roles plugin) versions <= 1.0, with a Reflected Cross-Site Scripting (XSS) flaw. The initial record attributes this to Improper Neutralization of Input During Web Page Generation, enabling reflected XSS. The CVSS ...
CVE-2025-25113 WordPress Implied Cookie Consent plugin <= 1.3 - Reflected Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Senktec Implied Cookie Consent implied-cookie-consent allows Reflected XSS.This issue affects Implied Cookie Consent: from n/a through = 1.3...
CVE-2025-25113
CVE-2025-25113 concerns WordPress plugin “Implied Cookie Consent” (versions up to 1.3). Connected sources note a Reflected Cross‑Site Scripting (XSS) vulnerability arising from improper input neutralization in the plugin, enabling reflected XSS in affected pages. The initial entry identifies the ...
CVE-2025-25114 WordPress User Role plugin <= 1.0 - Reflected Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in ehabstar User Role user-roles allows Reflected XSS.This issue affects User Role: from n/a through = 1.0...
CVE-2025-25108 WordPress SW Plus Plugin <= 2.1 - Reflected Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in shalomworld SW Plus allows Reflected XSS. This issue affects SW Plus: from n/a through 2.1...
CVE-2025-25113 WordPress Implied Cookie Consent plugin <= 1.3 - Reflected Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in NotFound Implied Cookie Consent allows Reflected XSS. This issue affects Implied Cookie Consent: from n/a through 1.3...
CVE-2025-25108
CVE-2025-25108 describes a reflected XSS vulnerability in the WordPress SW Plus plugin (versions up to 2.1). The issue arises from improper input neutralization during web page generation, enabling an attacker-controlled input to be reflected in the page. Affected product: WordPress SW Plus plugin
CVE-2025-25087 WordPress seekXL Snapr plugin <= 2.0.6 - Reflected Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in NotFound seekXL Snapr allows Reflected XSS. This issue affects seekXL Snapr: from n/a through 2.0.6...