16290 matches found
CVE-2025-23519
CVE-2025-23519 affects the WordPress plugin G Web Pro Store Locator (versions
CVE-2025-23520
CVE-2025-23520 affects the WordPress Heartland Management Terminal plugin (versions ≤ 1.3.0). The vulnerability is a reflected Cross-Site Scripting (XSS) due to improper input neutralization during web page generation. Affected product is the Heartland Management Terminal plugin for WordPress; no...
CVE-2025-23517 WordPress Google Map on Post/Page plugin <= 1.1 - Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in sunil chaulagain Google Map on Post/Page google-map-on-postpage allows Reflected XSS.This issue affects Google Map on Post/Page: from n/a through = 1.1...
CVE-2025-23517 WordPress Google Map on Post/Page plugin <= 1.1 - Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in sunil chaulagain Google Map on Post/Page google-map-on-postpage allows Reflected XSS.This issue affects Google Map on Post/Page: from n/a through = 1.1...
CVE-2025-23519 WordPress G Web Pro Store Locator plugin <= 2.0.1 - Reflected Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in NotFound G Web Pro Store Locator allows Reflected XSS. This issue affects G Web Pro Store Locator: from n/a through 2.0.1...
CVE-2025-23505
The CVE-2025-23505 entry concerns the WordPress Pit Login Welcome plugin, affected
CVE-2025-23505 WordPress Pit Login Welcome plugin <= 1.1.5 - Reflected Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Pantho Bihosh Pit Login Welcome pit-login-welcome allows Reflected XSS.This issue affects Pit Login Welcome: from n/a through = 1.1.5...
CVE-2025-23516
CVE-2025-23516 corresponds to a reflected XSS in the WordPress plugin Sale with Razorpay (versions
CVE-2025-23490
CVE-2025-23490 affects the WordPress Browser-Update-Notify plugin (versions
CVE-2025-23496
CVE-2025-23496 describes a Reflected Cross-Site Scripting (XSS) vulnerability in the WordPress WP FPO plugin (and NotFound WP FPO) with improper input neutralization during web page generation. Affected: WP FPO plugin versions up to 1.0 (and NotFound WP FPO up to 1.0). Documented by multiple sour...
CVE-2025-23494
CVE-2025-23494 corresponds to a reflected XSS in the WordPress Quizzin plugin, affecting versions up to 1.01.4 (NotFound Quizzin). Public details in the provided connected documents confirm the vulnerability type (Reflected XSS) and affected software, but do not specify a fixed version or remedia...
CVE-2025-23488
CVE-2025-23488 affects the WordPress rng-refresh plugin (versions
CVE-2025-23484
CVE-2025-23484 affects the WordPress Predict When plugin (versions
CVE-2025-23484 WordPress Predict When plugin <= 1.3 - Reflected Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Cojecto Predict When predict-when allows Reflected XSS.This issue affects Predict When: from n/a through = 1.3...
CVE-2025-23487
CVE-2025-23487: WordPress Easy Gallery (NotFound/Easy Gallery) plugin <= 1.4 is affected by Reflected XSS due to improper input neutralization during page generation. Exploitation requires user interaction and can occur without privileges over the network; impact is limited to client-side scri...
CVE-2025-23487 WordPress Easy Gallery plugin <= 1.4 - Reflected Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in odihost Easy Gallery simple-gallery-odihost allows Reflected XSS.This issue affects Easy Gallery: from n/a through = 1.4...
CVE-2025-23482
CVE-2025-23482 refers to a reflected Cross-Site Scripting vulnerability in the WordPress plugin NotFound azurecurve Floating Featured Image, affecting versions up to 2.2.0. The root cause is improper input neutralization during web page generation. Public sources (NVD, Red Hat, CVE lists, Patchst...
CVE-2025-23482 WordPress azurecurve Floating Featured Image plugin <= 2.2.0 - Reflected Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in azurecurve azurecurve Floating Featured Image azurecurve-floating-featured-image allows Reflected XSS.This issue affects azurecurve Floating Featured Image: from n/a through = 2.2.0...
CVE-2025-23485
CVE-2025-23485 concerns a reflected Cross-Site Scripting (XSS) in the WordPress RS Survey plugin (versions <= 1.0). The issue arises from improper input neutralization during web page generation, enabling reflected XSS when handling user-supplied input. Affected product is the RS Survey plugin...
CVE-2025-23473 WordPress Killer Theme Options plugin <= 2.0 - Reflected Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in NotFound Killer Theme Options allows Reflected XSS. This issue affects Killer Theme Options: from n/a through 2.0...