CVE-2025-23564 WordPress WP FixTag plugin <= v2.0.2 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in mohsenshahbazi WP FixTag allows Reflected XSS. This issue affects WP FixTag: from n/a through v2.0.2...

CVE-2025-23575 WordPress DX Sales CRM plugin <= 1.1 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in DevriX DX Sales CRM dx-sales-crm allows Reflected XSS.This issue affects DX Sales CRM: from n/a through = 1.1...

CVE-2025-23570

CVE-2025-23570 is a Reflected XSS in the WordPress WP Social Links plugin (

CVE-2025-23575 WordPress DX Sales CRM plugin <= 1.1 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in DevriX DX Sales CRM dx-sales-crm allows Reflected XSS.This issue affects DX Sales CRM: from n/a through = 1.1...

CVE-2025-23564

CVE-2025-23564 covers a Reflected XSS in the WordPress WP FixTag plugin (versions up to and including v2.0.2). The issue is described as improper neutralization of input during web page generation, enabling reflected XSS. Affected product: WP FixTag (WordPress plugin). Impact per the CVE metadata...

CVE-2025-23556 WordPress Push Envoy Notifications plugin <= 1.0.0 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in netbitsolutions Push Envoy Notifications push-envoy allows Reflected XSS.This issue affects Push Envoy Notifications: from n/a through = 1.0.0...

CVE-2025-23555

CVE-2025-23555 affects the WordPress plugin Ui Slider Filter By Price (versions ≤ 1.1). The issue is a Reflected Cross-Site Scripting (XSS) vulnerability caused by improper input neutralization during web page generation. Impact details in the sources consistently describe a reflected XSS scenari...

CVE-2025-23556

CVE-2025-23556 concerns a reflected Cross-Site Scripting (XSS) in the WordPress Push Envoy Notifications plugin

CVE-2025-23553

CVE-2025-23553 corresponds to a reflected Cross-Site Scripting (XSS) vulnerability in the WordPress plugin WordPress Userbase Access Control (versions

CVE-2025-23552

CVE-2025-23552 affects the WordPress WordPress Texteller plugin (versions

CVE-2025-23556 WordPress Push Envoy Notifications plugin <= 1.0.0 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in netbitsolutions Push Envoy Notifications push-envoy allows Reflected XSS.This issue affects Push Envoy Notifications: from n/a through = 1.0.0...

CVE-2025-23538

The CVE refers to a reflected Cross-Site Scripting (XSS) vulnerability in the WordPress WP Contest plugin, affecting versions up to 1.0.0. The root cause is improper neutralization of input during web page generation, enabling reflected XSS. Connected sources consistently describe the issue and l...

CVE-2025-23526

CVE-2025-23526 affects the WordPress Swift Calendar Online Appointment Scheduling plugin up to version 1.3.3. The vulnerability is a Reflected Cross-Site Scripting (XSS) flaw caused by improper neutralization of input during web page generation, enabling reflected XSS in affected environments. Mu...

CVE-2025-23536

CVE-2025-23536: WordPress Track Page Scroll plugin

CVE-2025-23539

CVE-2025-23539 concerns the WordPress plugin “Awesome Hooks” (NotFound) up to version 1.0.1. The issue is an improper neutralization of input during web page generation, resulting in a reflected cross-site scripting (XSS) vulnerability. Affected component: the WordPress plugin’s input handling in...

CVE-2025-23524 WordPress ClickBank Storefront WordPress Plugin plugin <= 1.7 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in dactum ClickBank Storefront mycbgenie-clickbank-storefront allows Reflected XSS.This issue affects ClickBank Storefront: from n/a through = 1.7...

CVE-2025-23539 WordPress Awesome Hooks plugin <= 1.0.1 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in NotFound Awesome Hooks allows Reflected XSS. This issue affects Awesome Hooks: from n/a through 1.0.1...

CVE-2025-23524

CVE-2025-23524 affects the WordPress ClickBank Storefront plugin (versions ≤ 1.7). The vulnerability is a Reflected Cross-Site Scripting (XSS) caused by improper input neutralization during web page generation. Multiple connected sources (Red Hat, NVD, CVE lists, and PatchStack) corroborate the s...

CVE-2025-23538 WordPress WP Contest plugin <= 1.0.0 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Sophia M Williams WP Contest wp-contest allows Reflected XSS.This issue affects WP Contest: from n/a through = 1.0.0...

CVE-2025-23521

The CVE CVE-2025-23521 concerns a Reflected Cross-Site Scripting (XSS) in the WordPress plugin Goodlayers Blocks, affecting versions up to 1.0.1. The root cause is improper input neutralization during web page generation. Affected component: Goodlayers Blocks (WordPress plugin). Impact details in...