CVE-2025-23653 WordPress Form To Online Booking plugin <= 1.0 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in NotFound Form To Online Booking allows Reflected XSS. This issue affects Form To Online Booking: from n/a through 1.0...

CVE-2025-23655 WordPress Contact Form 7 – Paystack Add-on plugin <= 1.2.3 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in crystalwebpro Contact Form 7 – Paystack Add-on cf7-paystack-add-on allows Reflected XSS.This issue affects Contact Form 7 – Paystack Add-on: from n/a through = 1.2.3...

CVE-2025-23652 WordPress Add custom content after post plugin <= 1.0 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Fabio Zuanon Add custom content after post add-custom-content-after-post allows Reflected XSS.This issue affects Add custom content after post: from n/a through = 1.0...

CVE-2025-23651 WordPress Scroll Top plugin <= 1.3.3 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in adamskaat Scroll Top scroll-to-top-builder allows Reflected XSS.This issue affects Scroll Top: from n/a through = 1.3.3...

CVE-2025-23653 WordPress Form To Online Booking plugin <= 1.0 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Nabeel Tahir Form To Online Booking cf7-calendly-integration allows Reflected XSS.This issue affects Form To Online Booking: from n/a through = 1.0...

CVE-2025-23650 WordPress Tidy.ro plugin <= 1.3 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in razvypp Tidy.ro tidyro allows Reflected XSS.This issue affects Tidy.ro: from n/a through = 1.3...

CVE-2025-23655

CVE-2025-23655 is a Reflected XSS in the WordPress plugin Contact Form 7 – Paystack Add-on (

CVE-2025-23653

CVE-2025-23653 is a reflected XSS in the WordPress plugin “Form To Online Booking” (NotFound Form To Online Booking) with affected range reported as n/a through 1.0. Root cause is improper input neutralization during web page generation, enabling reflected cross-site scripting. Public records in ...

CVE-2025-23652

Summary (CVE-2025-23652): A WordPress plugin issue in Add custom content after post (notFound) exhibits Reflected Cross-Site Scripting due to improper input neutralization during web page generation. Affected versions are n/a through 1.0. The Red Hat and PT Security entries explicitly note the vu...

CVE-2025-23571 WordPress Internal Links Generator plugin <= 3.51 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in NotFound Internal Links Generator allows Reflected XSS. This issue affects Internal Links Generator: from n/a through 3.51...

CVE-2025-23568 WordPress WP Login Attempt Log plugin <= 1.3 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in fredsted WP Login Attempt Log wp-login-attempt-log allows Reflected XSS.This issue affects WP Login Attempt Log: from n/a through = 1.3...

CVE-2025-23571 WordPress Internal Links Generator plugin <= 3.51 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in makong Internal Links Generator internal-links-generator allows Reflected XSS.This issue affects Internal Links Generator: from n/a through = 3.51...

CVE-2025-23568 WordPress WP Login Attempt Log plugin <= 1.3 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in fredsted WP Login Attempt Log allows Reflected XSS. This issue affects WP Login Attempt Log: from n/a through 1.3...

CVE-2025-23598

CVE-2025-23598 is a Reflected XSS in the WordPress plugin Recip.ly (WordPress plugin/Recip.ly) that affects versions up to 1.1.8. The vulnerability arises from improper neutralization of user-supplied input during web page generation, enabling cross-site scripting. Multiple sources (NVD, Red Hat ...

CVE-2025-23571

CVE-2025-23571 is a reflected XSS in WordPress Internal Links Generator (plugin)

CVE-2025-23646 WordPress Library Instruction Recorder plugin <= 1.1.4 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Matt Brooks Library Instruction Recorder library-instruction-recorder allows Reflected XSS.This issue affects Library Instruction Recorder: from n/a through = 1.1.4...

CVE-2025-23648

CVE-2025-23648 concerns the WordPress plugin AdsMiddle by wjharil. The initial and connected sources describe an improper neutralization of input during web page generation that enables a reflected XSS vulnerability affecting AdsMiddle versions up to 1.0. The CVSS 3.1 score is 7.1 (HIGH) with net...

CVE-2025-23647

CVE-2025-23647 is a WordPress WP-Clap plugin vulnerability: an improper neutralization of input leading to Reflected XSS affecting WP-Clap versions up to 1.5. The CVE lists a CVSS v3.1 base score of 7.1 (HIGH) with Network attack vector, Low confidentiality/integrity/availability impacts, and use...

CVE-2025-23646

CVE-2025-23646 affects WordPress plugin Library Instruction Recorder (till version 1.1.4). Description: Improper input neutralization during web page generation leads to Reflected XSS. Root cause: insufficient sanitization of inputs in the page generation path. Impact: Reflected cross-site script...

CVE-2025-23648 WordPress AdsMiddle plugin <= 1.0 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in wjharil AdsMiddle adsmiddle allows Reflected XSS.This issue affects AdsMiddle: from n/a through = 1.0...