CVE-2025-58021 WordPress List Child Pages Shortcode Plugin <= 1.3.1 - Cross Site Scripting (XSS) Vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in douglaskarr List Child Pages Shortcode list-child-pages-shortcode allows Stored XSS.This issue affects List Child Pages Shortcode: from n/a through = 1.3.1...

CVE-2025-58027 WordPress NGG Smart Image Search Plugin <= 3.4.3 - Cross Site Scripting (XSS) Vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in wpo-HR NGG Smart Image Search ngg-smart-image-search allows Stored XSS.This issue affects NGG Smart Image Search: from n/a through = 3.4.3...

CVE-2025-58199

Summary: CVE-2025-58199 is a CSRF vulnerability in Fastly (the Fastly service) affecting versions up to 1.2.28. The accompanying metrics show base CVSS v3.1 score 4.3 (Medium) with network attack vector, low integrity impact, and user interaction required. The connected document indicates the iss...

CVE-2025-58219 WordPress Show Pages List Plugin <= 1.2.0 - Cross Site Request Forgery (CSRF) Vulnerability

Cross-Site Request Forgery CSRF vulnerability in LIJE Show Pages List show-pages-list allows Cross Site Request Forgery.This issue affects Show Pages List: from n/a through = 1.2.0...

CVE-2025-58222 WordPress Team Manager plugin <= 2.5.1 - Broken Access Control vulnerability

Missing Authorization vulnerability in Maidul Team Manager wp-team-manager allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Team Manager: from n/a through = 2.5.1...

CVE-2025-58223

CVE-2025-58223 describes a Stored Cross-Site Scripting (XSS) vulnerability in the WordPress plugin VoucherPress. Affected: VoucherPress versions from n/a up to and including 1.5.7. The CVE notes an input handling issue during web page generation that enables stored XSS. The vulnerability is rated...

CVE-2025-58224

Cross-Site Request Forgery CSRF vulnerability in Printeers Printeers Print & Ship invition-print-ship allows Cross Site Request Forgery.This issue affects Printeers Print & Ship: from n/a through = 1.17.0...

CVE-2025-58227 WordPress Podlove Subscribe button Plugin <= 1.3.11 - Cross Site Scripting (XSS) Vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Alexander Lueken Podlove Subscribe button podlove-subscribe-button allows Stored XSS.This issue affects Podlove Subscribe button: from n/a through = 1.3.11...

CVE-2025-58237

CVE-2025-58237: LC Wizard (Connector Wizard) for WordPress has a stored XSS in LC Wizard/Connector Wizard up to version 1.4.0 (initial cites 1.3.0). Root cause: improper input neutralization during web page generation. Affected plugin: Connector Wizard (formerly LC Wizard); vulnerability context ...

CVE-2025-58239

CVE-2025-58239 describes a stored cross-site scripting vulnerability in the WordPress plugin “Category Dropdown” (WP Category Dropdown) by GCS Design, affecting versions up to 1.9 (input handling during web page generation is not properly neutralized). The CVE entry notes stored XSS as the vulner...

CVE-2025-58249

CVE-2025-58249 involves Themeum Qubely (qubely) for WordPress, described as an Insertion of Sensitive Information Into Sent Data vulnerability that can lead to retrieval of embedded sensitive data. Affected product/version range stated as Qubely: from n/a through

CVE-2025-58252 WordPress Getwid Plugin <= 2.1.2 - Sensitive Data Exposure Vulnerability

Insertion of Sensitive Information Into Sent Data vulnerability in jetmonsters Getwid getwid allows Retrieve Embedded Sensitive Data.This issue affects Getwid: from n/a through = 2.1.2...

CVE-2025-58256 WordPress DOAJ Export Plugin <= 1.0.4 - Cross Site Scripting (XSS) Vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Jonathan Brinley DOAJ Export doaj-export allows Stored XSS.This issue affects DOAJ Export: from n/a through = 1.0.4...

CVE-2025-58260 WordPress Highlight and Share – Social Text and Image Sharing plugin <= 5.1.1 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Ronald Huereca Highlight and Share highlight-and-share allows Stored XSS.This issue affects Highlight and Share: from n/a through = 5.1.1...

CVE-2025-58269

CVE-2025-58269 affects WP Project Manager (weDevs). The vulnerability is described as a hard-coded credentials issue that could allow retrieval of embedded sensitive data from WP Project Manager versions up to 2.6.25. The connected data indicates no published exploit details in the provided docs,...

CVE-2025-58647

CVE-2025-58647 is a stored XSS in the WordPress plugin Simple Restaurant Menu. Affected: Simple Restaurant Menu

CVE-2025-58646 WordPress Mobi2Go Plugin <= 1.0.0 - Cross Site Scripting (XSS) Vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in chtombleson Mobi2Go mobi2go allows Stored XSS.This issue affects Mobi2Go: from n/a through = 1.0.0...

CVE-2025-58646

CVE-2025-58646 affects Mobi2Go (WordPress plugin). Reported as an Improper Neutralization of Input During Web Page Generation (Stored XSS) affecting Mobi2Go: from n/a through 1.0.0. Public details in the initial document indicate a Stored XSS vulnerability via insufficient input sanitization, wit...

CVE-2025-58655 WordPress Category Featured Images Plugin <= 1.1.8 - Cross Site Scripting (XSS) Vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Mat Category Featured Images category-featured-images allows Stored XSS.This issue affects Category Featured Images: from n/a through = 1.1.8...

CVE-2025-58660 WordPress Oshine Core Plugin <= 1.5.5 - Broken Access Control Vulnerability

Missing Authorization vulnerability in brandexponents Oshine Core oshine-core allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Oshine Core: from n/a through = 1.5.5...