CVE-2025-23960

CVE-2025-23960 describes a Reflected XSS vulnerability in the WordPress plugin Save & Import Image from URL . Affected: plugin versions up to 0.7 (listed as from n/a through 0.7). Root cause: improper neutralization of input during web page generation, enabling reflection of injected payloads. Im...

CVE-2025-23894 WordPress wp-flickr-press Plugin <= 2.6.4 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in tatsuya wp-flickr-press wp-flickr-press allows Reflected XSS.This issue affects wp-flickr-press: from n/a through = 2.6.4...

CVE-2025-23730

CVE-2025-23730 refers to a reflected XSS in the FLX Dashboard Groups WordPress plugin. The vulnerability affects FLX Dashboard Groups versions from n/a to 0.0.7. The NVD/RH/ENISA data in the connected documents confirm a Reflected Cross-Site Scripting issue, with a CVSS v3.1 base score of 7.1 (Hi...

CVE-2025-23733

CVE-2025-23733 is a Reflected XSS in the WordPress plugin SC Simple Zazzle. Affected: SC Simple Zazzle from n/a up to 1.1.6. Root cause: Improper neutralization of input during web page generation. Implications and exploit details are not expanded beyond Reflected XSS in the provided documents. C...

CVE-2025-23733 WordPress SC Simple Zazzle plugin <= 1.1.6 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in sayoko SC Simple Zazzle sc-simple-zazzle allows Reflected XSS.This issue affects SC Simple Zazzle: from n/a through = 1.1.6...

CVE-2025-23834 WordPress Links/Problem Reporter plugin <= 2.6.0 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in RaminMT Links/Problem Reporter report-broken-links allows Reflected XSS.This issue affects Links/Problem Reporter: from n/a through = 2.6.0...

CVE-2025-23836 WordPress Custom Coming Soon Plugin <= 2.2 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in SuryaBhan Custom Coming Soon custom-coming-soon allows Reflected XSS.This issue affects Custom Coming Soon: from n/a through = 2.2...

CVE-2025-23733 WordPress SC Simple Zazzle plugin <= 1.1.6 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in sayoko SC Simple Zazzle sc-simple-zazzle allows Reflected XSS.This issue affects SC Simple Zazzle: from n/a through = 1.1.6...

CVE-2025-23729 WordPress XTRA Settings plugin <= 2.1.8 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in fures XTRA Settings xtra-settings allows Reflected XSS.This issue affects XTRA Settings: from n/a through = 2.1.8...

CVE-2025-23729

Technical details beyond the initial description are not provided in the connected documents. The CVE-2025-23729 entry describes a Reflected XSS in XTRA Settings (WordPress) affecting versions up to 2.1.8; monitor for official advisories and patches.

CVE-2025-23725 WordPress Accessibility Task Manager plugin <= 1.2.1 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in pshikli Accessibility Task Manager accessibility-task-manager allows Reflected XSS.This issue affects Accessibility Task Manager: from n/a through = 1.2.1...

CVE-2025-23722

CVE-2025-23722 targets Mind3doM RyeBread Widgets with a Reflected Cross-Site Scripting flaw caused by improper input neutralization during web page generation. Affected: Mind3doM RyeBread Widgets, versions up to 1.0 (listed as 1.0 in the connected Red Hat entry). Exploitation details are not prov...

CVE-2025-23722 WordPress Mind3doM RyeBread Widgets plugin <= 1.0 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in mind3dom Mind3doM RyeBread Widgets mind3dom-ryebread-widgets allows Reflected XSS.This issue affects Mind3doM RyeBread Widgets: from n/a through = 1.0...

CVE-2025-23629 WordPress Gallerio plugin <= 1.0.1 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Subhasis Laha Gallerio gallerio allows Reflected XSS.This issue affects Gallerio: from n/a through = 1.0.1...

CVE-2025-23629

CVE-2025-23629 is a Reflected Cross‑Site Scripting vulnerability in the WordPress plugin Gallerio . The initial description states an XSS by improper neutralization of input during Web Page Generation, affecting Gallerio versions from n/a up to 1.0.1 . Connected sources corroborate the CVE as a G...

CVE-2025-23628

CVE-2025-23628: Reflected XSS in New Media One GeoDigs (GeoDigs) WordPress plugin; affects GeoDigs versions up to 3.4.1. Root cause: improper input neutralization during web page generation. CVSS v3.1 base score 7.1 (HIGH). Exploit details and remediation/version fixes are not provided in the sup...

CVE-2025-23634

CVE-2025-23634 is a Reflected XSS in the WordPress plugin Youmax (notFound Youtube Video Grid) affecting versions up to 1.9. The vulnerability originates from improper input neutralization during web page generation, enabling reflected script execution. Public references in the dataset (NVD/NVD m...

CVE-2025-23624 WordPress WpDevTool plugin <= 0.1.1 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Alessandro Benoit WpDevTool wpdevtool allows Reflected XSS.This issue affects WpDevTool: from n/a through = 0.1.1...

CVE-2025-23624

CVE-2025-23624 is a Cross-Site Scripting vulnerability affecting the WordPress plugin WpDevTool by Alessandro Benoit. The issue is described as Improper Neutralization of Input During Web Page Generation (Reflected XSS) and affects WpDevTool versions from n/a up to 0.1.1. The CVSS v3.1 base score...

CVE-2025-23544

CVE-2025-23544 corresponds to a Reflected XSS in heart5 StatPressCN. Affected: StatPressCN versions up to 1.9.1. Root cause: Improper input neutralization during web page generation. Impact: Reflected injection that may trigger script execution in affected users’ browsers. Public details in conne...