CVE-2025-22569

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in GrandSlambert Featured Page Widget featured-page-widget allows Reflected XSS.This issue affects Featured Page Widget: from n/a through = 2.2...

CVE-2025-22337

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in infosoftplugin Order Audit Log for WooCommerce order-audit-log-for-woocommerce allows Reflected XSS.This issue affects Order Audit Log for WooCommerce: from n/a through = 2.0...

CVE-2025-22344

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in timmcdaniels Media Category Library media-category-library allows Reflected XSS.This issue affects Media Category Library: from n/a through = 2.7...

CVE-2025-22314

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in WP Scripts Food Store – Online Food Delivery & Pickup food-store allows Reflected XSS.This issue affects Food Store – Online Food Delivery & Pickup: from n/a through = 1.5.4...

CVE-2025-22499

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in FAKTOR VIER F4 Post Tree f4-tree allows Reflected XSS.This issue affects F4 Post Tree: from n/a through = 1.1.18...

CVE-2024-56301

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in enituretechnology Distance Based Shipping Calculator distance-based-shipping-calculator allows Reflected XSS.This issue affects Distance Based Shipping Calculator: from n/a through = 2.0.21...

CVE-2024-56065

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Saleswonder Team: Tobias WP2LEADS wp2leads allows Reflected XSS.This issue affects WP2LEADS: from n/a through = 3.4.2...

CVE-2024-56301

CVE-2024-56301 is a WordPress vulnerability in the Distance Based Shipping Calculator plugin. Connected sources confirm an improper input neutralization during web page generation, enabling a Reflected XSS. Affected range is the WordPress plugin’s Distance Based Shipping Calculator versions up to...

CVE-2024-56065

CVE-2024-56065 — Reflected Cross-Site Scripting in WP2LEADS (Saleswonder.biz Team WP2LEADS). Affected: WordPress WP2LEADS up to version 3.4.2; root cause: improper input neutralization during web page generation, enabling reflected XSS. Impact per sources indicates potential user interaction with...

CVE-2025-22337 WordPress Order Audit Log for WooCommerce plugin <= 2.0 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in infosoftplugin Order Audit Log for WooCommerce order-audit-log-for-woocommerce allows Reflected XSS.This issue affects Order Audit Log for WooCommerce: from n/a through = 2.0...

CVE-2025-22498 WordPress LucidLMS plugin <= 1.0.5 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in N3wNormal LucidLMS lucidlms allows Reflected XSS.This issue affects LucidLMS: from n/a through = 1.0.5...

CVE-2025-22498

CVE-2025-22498 (LucidLMS) is a Reflected XSS vulnerability in New Normal LLC’s LucidLMS. The Red Hat CVE entry confirms the issue: improper neutralization of input during web page generation allows reflected cross-site scripting, affecting LucidLMS versions from n/a up to 1.0.5. The initial descr...

CVE-2025-22568

CVE-2025-22568: Reflected XSS in the WordPress plugin Post And Page Reactions (by Arete IT) affecting versions up to 1.0.5 (inclusive). Publicly disclosed data shows CVSS v3.1 base score 7.1 (HIGH) with network access, no privileges required, user interaction needed. The connected Red Hat advisor...

CVE-2025-22568 WordPress Post And Page Reactions Plugin <= 1.0.5 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in arete-it Post And Page Reactions post-and-page-reactions allows Reflected XSS.This issue affects Post And Page Reactions: from n/a through = 1.0.5...

CVE-2025-22569 WordPress Featured Page Widget Plugin <= 2.2 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in GrandSlambert Featured Page Widget featured-page-widget allows Reflected XSS.This issue affects Featured Page Widget: from n/a through = 2.2...

CVE-2025-22569 WordPress Featured Page Widget Plugin <= 2.2 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in grandslambert Featured Page Widget allows Reflected XSS.This issue affects Featured Page Widget: from n/a through 2.2...

CVE-2025-22583

CVE-2025-22583 is a reflected Cross‑Site Scripting vulnerability in the WordPress plugin Scan External Links. The description indicates improper neutralization of input during web page generation, enabling reflected XSS for versions from n/a through 1.0. Connected Red Hat entry and related vendor...

CVE-2025-22583 WordPress Scan External Links Plugin <= 1.0 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in anshulsojatia Scan External Links scan-external-links allows Reflected XSS.This issue affects Scan External Links: from n/a through = 1.0...

CVE-2025-22583 WordPress Scan External Links Plugin <= 1.0 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Anshul Sojatia Scan External Links allows Reflected XSS.This issue affects Scan External Links: from n/a through 1.0...

CVE-2025-22586

CVE-2025-22586 is a WordPress plugin vulnerability in WPEX Replace DB Urls (affected versions up to 0.4.0) described as a Reflected Cross-Site Scripting (XSS) flaw due to improper input neutralization during web page generation. The CVE’s public metrics indicate a CVSS v3.1 base score of 7.1 (HIG...