CVE-2025-24688 WordPress WP Mailster Plugin <= 1.8.20.0 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in brandtoss WP Mailster wp-mailster allows Reflected XSS.This issue affects WP Mailster: from n/a through = 1.8.20.0...

CVE-2025-24688

CVE-2025-24688 : Reflected Cross-Site Scripting in the WordPress plugin WP Mailster (versions up to 1.8.20.0) caused by improper neutralization of input during web page generation. The CVE shows a high severity (CVSS 3.1) with impact on confidentiality, integrity, and availability (C:L, I:L, A:L)...

CVE-2025-24617

CVE-2025-24617 is a Reflected XSS vulnerability in the WordPress AcyMailing Plugin (

CVE-2025-24616 WordPress Uix Page Builder Plugin <= 1.7.3 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in UIUX Lab Uix Page Builder uix-page-builder allows Reflected XSS.This issue affects Uix Page Builder: from n/a through = 1.7.3...

CVE-2025-24615

CVE-2025-24615 affects the WordPress plugin fatcatapps Analytics Cat (versions up to 1.1.2). The issue is a Reflected Cross‑Site Scripting vulnerability caused by improper neutralization of input during web page generation. Impact is per CVSS 3.1: AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L with base sco...

CVE-2025-24615 WordPress Analytics Cat Plugin <= 1.1.2 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in fatcatapps Analytics Cat analytics-cat allows Reflected XSS.This issue affects Analytics Cat: from n/a through = 1.1.2...

CVE-2025-24700 WordPress WP Event Aggregator Plugin <= 1.8.2 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Xylus Themes WP Event Aggregator allows Reflected XSS. This issue affects WP Event Aggregator: from n/a through 1.8.2...

CVE-2025-24700

CVE-2025-24700 refers to a Reflected Cross-Site Scripting (XSS) vulnerability in the WordPress plugin WP Event Aggregator (affected: versions

CVE-2025-24616

CVE-2025-24616 concerns WordPress Uix Page Builder (plugin) versions up to 1.7.3. The issue is a reflected XSS caused by improper input neutralization during web page generation. The CVE’s base metrics (CVSS 3.1) indicate Network attack vector, Low confidentiality/integrity/availability impact, a...

CVE-2025-24614 WordPress Post Timeline Plugin <= 2.3.9 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Agile Logix Post Timeline post-timeline allows Reflected XSS.This issue affects Post Timeline: from n/a through = 2.3.9...

CVE-2025-24614 WordPress Post Timeline Plugin <= 2.3.9 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Agile Logix Post Timeline post-timeline allows Reflected XSS.This issue affects Post Timeline: from n/a through = 2.3.9...

CVE-2025-24564

CVE-2025-24564 corresponds to a WordPress plugin vulnerability: WordPress plugin “Contact Form With Shortcode” (versions up to 4.2.5) suffers a Reflected XSS due to improper input neutralization during page generation. The issue is tracked across multiple feeds (Red Hat, NVD, CVE List) with the s...

CVE-2025-24564 WordPress Contact Form With Shortcode plugin <= 4.2.5 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in aviplugins.com Contact Form With Shortcode contact-form-with-shortcode allows Reflected XSS.This issue affects Contact Form With Shortcode: from n/a through = 4.2.5...

CVE-2025-24592 WordPress SysBasics Customize My Account for WooCommerce plugin <= 2.8.22 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in SysBasics Customize My Account for WooCommerce customize-my-account-for-woocommerce allows Reflected XSS.This issue affects Customize My Account for WooCommerce: from n/a through = 2.8.22...

CVE-2025-24614

CVE-2025-24614 corresponds to a reflected XSS vulnerability in the WordPress Post Timeline plugin, affecting versions up to 2.3.9. The issue arises from improper neutralization of input during web page generation, enabling reflected XSS. Connected sources confirm the affected product (WordPress P...

CVE-2025-24565

CVE-2025-24565 affects the WordPress WP2LEADS plugin. Affected: versions prior to 3.3.3. Vulnerability: Reflected Cross-Site Scripting caused by improper neutralization of inputs during web page generation. Impact per sources: confidentiality, integrity, and availability may be affected (per CVSS...

CVE-2025-24566

Summary (CVE-2025-24566): Reflected XSS in the WordPress plugin “Intro Tour Tutorial DeepPresentation” versions n/a through 6.5.2 due to improper input neutralization during web page generation. Exploitation details are not provided in the documents, but remediation guidance exists: upgrade to a ...

CVE-2025-23790 WordPress Easy Code Placement Plugin <= 18.11 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in wassereimer Easy Code Placement allows Reflected XSS. This issue affects Easy Code Placement: from n/a through 18.11...

CVE-2025-23853 WordPress NoFollow Free plugin <= 1.6.3 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in michelem NoFollow Free nofollow-free allows Reflected XSS.This issue affects NoFollow Free: from n/a through = 1.6.3...

CVE-2025-23851 WordPress Coronavirus (COVID-19) Outbreak Data Widgets Plugin <= 1.1.1 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Khushwant Singh Coronavirus COVID-19 Outbreak Data Widgets coronavirus-data-widgets allows Reflected XSS.This issue affects Coronavirus COVID-19 Outbreak Data Widgets: from n/a through = 1.1.1...