CVE-2025-15695

The Translate WordPress with GTranslate plugin before 3.0.10 contains a stored cross-site scripting (XSS) vulnerability. One of its settings is not validated before the bundled front-end scripts build markup from it, allowing users with the administrator role or higher to store JavaScript that ex...

CVE-2021-38344

The Brizy Page Builder plugin = 2.3.11 for WordPress was vulnerable to stored XSS by lower-privileged users such as a subscribers. It was possible to add malicious JavaScript to a page by modifying the request sent to update the page via the brizyupdateitem AJAX action and adding JavaScript to th...