384 matches found
CVE-2025-1560
CVE-2025-1560 (WOW Entrance Effects WEE!) is a stored XSS vulnerability in the WordPress plugin WOW Entrance Effects (WEE!) up to version 0.1. The issue stems from insufficient input sanitization and output escaping in the plugin’s wee shortcode attributes, allowing authenticated attackers with c...
WordPress plugin WOW Entrance Effects (WEE!) 跨站脚本漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...
CVE-2025-1560: Improper Neutralization of Input During Web Page Generation
The WOW Entrance Effects WEE! plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'wee' shortcode in all versions up to, and including, 0.1 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticat...
WordPress WOW Entrance Effects (WEE!) plugin <= 0.1 - Authenticated (Contributor+) Stored Cross-Site Scripting vulnerability
Authenticated Contributor+ Stored Cross-Site Scripting vulnerability discovered by zakaria in WordPress Plugin WOW Entrance Effects WEE! versions = 0.1...
CVE-2025-26760
Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in Wow-Company Calculator Builder calculator-builder allows PHP Local File Inclusion.This issue affects Calculator Builder: from n/a through = 1.6.2...
CVE-2025-26760
CVE-2025-26760: WordPress Calculator Builder plugin
CVE-2025-26760: Improper Control of Filename for Include/Require Statement in PHP Program
Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in Wow-Company Calculator Builder calculator-builder allows PHP Local File Inclusion.This issue affects Calculator Builder: from n/a through = 1.6.2...
CVE-2025-24699
CVE-2025-24699 : WordPress WP Coder plugin is affected (versions up to 3.6). The issue is a CSRF that enables Cross‑Site Scripting (XSS) via the vulnerable plugin code. Public records identify the nature of the vulnerability as CSRF to XSS in WP Coder <= 3.6. Red Hat/RedHat-related and CVE dat...
CVE-2025-24699: Cross-Site Request Forgery (CSRF)
Cross-Site Request Forgery CSRF vulnerability in Wow-Company WP Coder wp-coder allows Cross-Site Scripting XSS.This issue affects WP Coder: from n/a through = 3.6...
CVE-2025-21375
Kernel Streaming WOW Thunk Service Driver Elevation of Privilege Vulnerability...
CVE-2025-21375: Improper Input Validation
Kernel Streaming WOW Thunk Service Driver Elevation of Privilege Vulnerability...
CVE-2024-51689
Improper Neutralization of Script-Related HTML Tags in a Web Page Basic XSS vulnerability in Saleswonder Team: Tobias CF7 WOW Styler cf7-styler allows Reflected XSS.This issue affects CF7 WOW Styler: from n/a through = 1.6.8...
CVE-2025-23588
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in baonguyenyam WOW Best CSS Compiler best-css-compiler allows Reflected XSS.This issue affects WOW Best CSS Compiler: from n/a through = 2.0.2...
CVE-2025-23588
CVE-2025-23588 is a Reflected XSS in the WOW Best CSS Compiler WordPress plugin (affected: WOW Best CSS Compiler
CVE-2025-23588 WordPress WOW Best CSS Compiler plugin <= 2.0.2 - Reflected Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in WOW WordPress WOW Best CSS Compiler allows Reflected XSS. This issue affects WOW Best CSS Compiler: from n/a through 2.0.2...
WordPress plugin WOW Best CSS Compiler 跨站脚本漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...
CVE-2025-23588: Improper Neutralization of Input During Web Page Generation
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in baonguyenyam WOW Best CSS Compiler best-css-compiler allows Reflected XSS.This issue affects WOW Best CSS Compiler: from n/a through = 2.0.2...
CVE-2025-24724
Cross-Site Request Forgery CSRF vulnerability in Wow-Company Side Menu Lite side-menu-lite allows Cross Site Request Forgery.This issue affects Side Menu Lite: from n/a through = 5.3.1...