CVE-2025-23482 WordPress azurecurve Floating Featured Image plugin <= 2.2.0 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in azurecurve azurecurve Floating Featured Image azurecurve-floating-featured-image allows Reflected XSS.This issue affects azurecurve Floating Featured Image: from n/a through = 2.2.0...

CVE-2025-23485

CVE-2025-23485 concerns a reflected Cross-Site Scripting (XSS) in the WordPress RS Survey plugin (versions &lt;= 1.0). The issue arises from improper input neutralization during web page generation, enabling reflected XSS when handling user-supplied input. Affected product is the RS Survey plugin...

CVE-2025-23473 WordPress Killer Theme Options plugin <= 2.0 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in NotFound Killer Theme Options allows Reflected XSS. This issue affects Killer Theme Options: from n/a through 2.0...

CVE-2025-23479 WordPress melascrivi plugin <= 1.4 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in NotFound melascrivi allows Reflected XSS. This issue affects melascrivi: from n/a through 1.4...

CVE-2025-23478 WordPress Photo Video Store plugin <= 21.07 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in NotFound Photo Video Store allows Reflected XSS. This issue affects Photo Video Store: from n/a through 21.07...

CVE-2025-23478

The CVE-2025-23478 entry concerns WordPress Photo Video Store plugin

CVE-2025-23479

CVE-2025-23479 concerns the WordPress melascrivi plugin (versions

CVE-2025-23481

The CVE-2025-23481 entry describes a Reflected XSS in the WordPress plugin “NotFound Ni WooCommerce Sales Report Email” (NotFound Ni WooCommerce Sales Report Email) up to version 3.1.4. The vulnerability arises from improper neutralization of input during web page generation , enabling reflected ...

CVE-2025-23473

CVE-2025-23473 is a reflected Cross-Site Scripting (XSS) vulnerability in the WordPress plugin WordPress Killer Theme Options (versions &lt;= 2.0). The root cause is improper neutralization of input during web page generation. Multiple sources (NVD, CVE records, Red Hat, CVE list, Cyber risk enri...

CVE-2025-23464

The connected sources confirm a concrete vulnerability: WordPress Twitter News Feed plugin (versions

CVE-2025-23468

CVE-2025-23468 affects WordPress plugin NotFound Essay Wizard (wpCRES) versions up to and including 1.0.6.4. The issue is a Reflected Cross-Site Scripting (XSS) due to improper neutralization of input during web page generation. Affected component: wpCRES plugin for Essay Wizard; vulnerable versi...

CVE-2025-23472

CVE-2025-23472 affects the WordPress NotFound Flexo Slider plugin, specifically versions

CVE-2025-23472 WordPress Flexo Slider plugin <= 1.0013 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in flexostudio Flexo Slider flexo-slider allows Reflected XSS.This issue affects Flexo Slider: from n/a through = 1.0013...

CVE-2025-23451

The CVE-2025-23451 entry concerns a Reflected Cross-Site Scripting (XSS) vulnerability in the WordPress plugin NotFound Awesome Twitter Feeds (versions up to 1.0). Affected component: the WordPress plugin’s input handling during web page generation, with the root cause described as improper input...

CVE-2025-23465

CVE-2025-23465 concerns the WordPress plugin Vampire Character Manager (versions &lt;= 2.13). The issue is a Reflected Cross‑Site Scripting (XSS) vulnerability caused by improper neutralization of input during web page generation. Affected product: WordPress Vampire Character Manager plugin

CVE-2025-23439

CVE-2025-23439 affects the WordPress plugin willshouse TinyMCE Extended Config, version

CVE-2025-23450 WordPress AW WooCommerce Kode Pembayaran plugin <= 1.1.4 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in agenwebsite AW WooCommerce Kode Pembayaran allows Reflected XSS. This issue affects AW WooCommerce Kode Pembayaran: from n/a through 1.1.4...

CVE-2025-23450

CVE-2025-23450 affects the WordPress plugin AW WooCommerce Kode Pembayaran (agenwebsite), with all versions up to 1.1.4 vulnerable to Reflected Cross-Site Scripting due to improper neutralization of input during web page generation. CVSSv3.1 base score 7.1 (HIGH) - network attack vector, no privi...

CVE-2025-23450 WordPress AW WooCommerce Kode Pembayaran plugin <= 1.1.4 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in agenwebsite AW WooCommerce Kode Pembayaran aw-woocommerce-kode-pembayaran allows Reflected XSS.This issue affects AW WooCommerce Kode Pembayaran: from n/a through = 1.1.4...

CVE-2025-23447

CVE-2025-23447 affects the WordPress plugin NotFound Smooth Dynamic Slider (Smooth Dynamic Slider) up to version 1.0. The issue is a Reflected XSS caused by improper input neutralization during web page generation. The CVSS v3.1 base score is 7.1 (HIGH). No explicit fix version is provided in the...