CVE-2025-23718 WordPress Mancx AskMe Widget plugin <= 0.3 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in mancx Mancx AskMe Widget mancx-askme-widget allows Reflected XSS.This issue affects Mancx AskMe Widget: from n/a through = 0.3...

CVE-2025-23670

CVE-2025-23670 is a Reflected Cross-Site Scripting vulnerability in the WordPress plugin '4 author cheer up donate' (versions up to 1.3). Affected component is the plugin’s input handling during web page generation, enabling JavaScript execution via reflected payloads. The NVD data lists CVSS v3....

CVE-2025-23670 WordPress 4 author cheer up donate plugin <= 1.3 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in NotFound 4 author cheer up donate allows Reflected XSS. This issue affects 4 author cheer up donate: from n/a through 1.3...

CVE-2025-23663

CVE-2025-23663 is a reflected Cross-Site Scripting (XSS) vulnerability in the WordPress Contexto plugin (versions

CVE-2025-23668

CVE-2025-23668 affects the WordPress plugin “ChatGPT Open AI Images & Content for WooCommerce” (NotFound) up to version 2.2.0. The vulnerability is a Reflected Cross-Site Scripting (XSS) due to improper input neutralization during web page generation. Impact is described as cross-site scripting w...

CVE-2025-23635 WordPress ePermissions plugin <= 1.2 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in mobde3net ePermissions epermissions allows Reflected XSS.This issue affects ePermissions: from n/a through = 1.2...

CVE-2025-23635

CVE-2025-23635 : Reflected Cross-Site Scripting in WordPress WordPress ePermissions plugin (versions &lt;= 1.2). The issue arises from improper neutralization of input during web page generation, enabling reflected XSS. Affected product/component: WordPress ePermissions plugin

CVE-2025-23619 WordPress Catch Duplicate Switcher plugin <= 2.0 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Catch Themes Catch Duplicate Switcher catch-duplicate-switcher allows Reflected XSS.This issue affects Catch Duplicate Switcher: from n/a through = 2.0...

CVE-2025-23663 WordPress Contexto plugin <= 1.0 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Adrian Vaquez Contexto contexto allows Reflected XSS.This issue affects Contexto: from n/a through = 1.0...

CVE-2025-23637

CVE-2025-23637 affects the WordPress plugin 新淘客WordPress插件 up to version 1.1.2. The root cause is Improper Neutralization of Input During Web Page Generation, yielding Reflected XSS in NotFound 新淘客WordPress插件. Reported details confirm a Reflected XSS vulnerability with CVSSv3.1 base score 7.1 (HI...

CVE-2025-23668 WordPress ChatGPT Open AI Images & Content for WooCommerce plugin <= 2.2.0 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Mauricio Urrego ChatGPT Open AI Images & Content for WooCommerce glasses-for-woocommerce allows Reflected XSS.This issue affects ChatGPT Open AI Images & Content for WooCommerce: from n/a through =...

CVE-2025-23600 WordPress Send to a Friend Addon plugin <= 1.4.1 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in pinal.shah Send to a Friend Addon allows Reflected XSS. This issue affects Send to a Friend Addon: from n/a through 1.4.1...

CVE-2025-23595

The CVE-2025-23595 entry concerns the WordPress Page Health-O-Meter plugin (versions up to and including 2.0). Affected component is the plugin’s input handling during page generation, where improper neutralization enables Reflected Cross-Site Scripting (XSS). Public documents identify the vulner...

CVE-2025-23616 WordPress Canalplan plugin <= 5.31 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Steve Canalplan canalplan-ac allows Reflected XSS.This issue affects Canalplan: from n/a through = 5.31...

CVE-2025-23600

CVE-2025-23600 is a reflected XSS in the WordPress plugin “Send to a Friend Addon” (versions 1.4.1 and earlier). The root cause is improper neutralization of input during web page generation, allowing attacker-supplied input to be reflected in the page. Affected component: pinal.shah Send to a Fr...

CVE-2025-23616

CVE-2025-23616 affects the WordPress Canalplan plugin (versions up to and including 5.31). The issue is an improper neutralization of input during web page generation, causing a reflected Cross-Site Scripting (XSS) vulnerability. Exploitation requires user interaction, and the CVSSv3.1 vector is ...

CVE-2025-23587

CVE-2025-23587 is a reflected Cross-Site Scripting vulnerability in the WordPress plugin “all-in-one-box-login”

CVE-2025-23586

CVE-2025-23586 concerns the WordPress plugin WP Post Category Notifications (versions &lt;= 1.0). The vulnerability is a reflected Cross-Site Scripting (XSS) flaw caused by improper neutralization of input during web page generation, enabling attacker-controlled input to be reflected in a web pag...

CVE-2025-23585 WordPress Goo.gl Url Shorter plugin <= 1.0.1 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in CantonBolo Goo.gl Url Shorter googl-url-shorter allows Reflected XSS.This issue affects Goo.gl Url Shorter: from n/a through = 1.0.1...

CVE-2025-23585

CVE-2025-23585 affects WordPress Goo.gl Url Shorter plugin (versions up to 1.0.1). The underlying issue is improper input neutralization in web page generation, enabling Reflected Cross‑Site Scripting (XSS). CVSSv3.1 base score 7.1 (HIGH) with network attack vector, low attack complexity, no priv...