WordPress Blue Wrench Video Widget Plugin <= 2.1.0 - Reflected Cross Site Scripting (XSS) vulnerability

Reflected Cross Site Scripting XSS vulnerability discovered by 0xd4rk5id3 in WordPress Plugin Blue Wrench Video Widget versions = 2.1.0...

WordPress Greek Namedays Widget Plugin <= 20191113 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by 0xd4rk5id3 in WordPress Plugin Greek Namedays Widget From Eortologio.Net versions = 20191113...

WordPress Custom Widget Creator plugin <= 1.0.5 - Reflected Cross Site Scripting (XSS) vulnerability

Reflected Cross Site Scripting XSS vulnerability discovered by Le Ngoc Anh in WordPress Plugin Custom Widget Creator versions = 1.0.5...

WordPress Mancx AskMe Widget plugin <= 0.3 - Reflected Cross Site Scripting (XSS) vulnerability

Reflected Cross Site Scripting XSS vulnerability discovered by João Pedro Soares de Alcântara Kinorth in WordPress Plugin Mancx AskMe Widget versions = 0.3...

WordPress MyAnime Widget plugin <= 1.0 - CSRF to Privilege Escalation vulnerability

CSRF to Privilege Escalation vulnerability discovered by Mika in WordPress Plugin MyAnime Widget versions = 1.0...

WordPress plugin Custom Widget Classes 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site request forgery vulnerability...

WordPress plugin Greek Namedays Widget From Eortologio.Net 跨站脚本漏洞

WordPress and WordPress plugin are products of the WordPress Foundation, a blogging platform developed in PHP. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site scripting vulnerability exists in WordPress plugin Greek Nameda...

WordPress plugin MeinTurnierplan.de Widget Viewer 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...

WordPress plugin MyAnime Widget 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL. WordPress plugin is an application plugin. A cross-site reques...

PT-2025-4926 · Unknown · Myanime Widget

Name of the Vulnerable Software and Affected Versions: MyAnime Widget versions n/a through 1.0 Description: A Cross-Site Request Forgery CSRF issue allows Privilege Escalation. This means an attacker can perform actions on behalf of another user without their knowledge or consent. Recommendations...

PT-2025-5139 · Unknown · Wellwisher Custom Widget Classes

Name of the Vulnerable Software and Affected Versions: wellwisher Custom Widget Classes versions 1.1 and earlier Description: The issue is a Cross-Site Request Forgery CSRF vulnerability that allows Cross Site Request Forgery. This is a type of attack where an attacker tricks a user into performi...

PT-2025-5088 · Eortologio.Net · Carrotbits Greek Namedays Widget

Name of the Vulnerable Software and Affected Versions: carrotbits Greek Namedays Widget From Eortologio.Net versions from n/a through 20191113 Description: The issue is related to improper neutralization of input during web page generation, which allows stored Cross-site Scripting XSS. This means...

WordPress Widget Options plugin <= 4.0.8 - Broken Access Control to Notice Dimissal vulnerability

Broken Access Control to Notice Dimissal vulnerability discovered by Trương Hữu Phúc truonghuuphuc in WordPress Plugin Widget Options versions = 4.0.8...

CVE-2025-22514

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Yamna Khawaja KNR Author List Widget knr-author-list-widget allows Reflected XSS.This issue affects KNR Author List Widget: from n/a through = 3.1.1...

CVE-2025-22569

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in GrandSlambert Featured Page Widget featured-page-widget allows Reflected XSS.This issue affects Featured Page Widget: from n/a through = 2.2...

CVE-2025-22514 WordPress Axact Author List Widget Plugin <= 3.1.1 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Yamna Tatheer KNR Author List Widget allows Reflected XSS.This issue affects KNR Author List Widget: from n/a through 3.1.1...

CVE-2025-22514

CVE-2025-22514 corresponds to a reflected Cross-Site Scripting vulnerability in KNR Axact Author List Widget (KNR Author List Widget). Connected Red Hat entry and other sources confirm the affected product as KNR Author List Widget and list the issue as Reflected XSS, affecting versions from n/a ...

CVE-2025-22569

The CVE-2025-22569 entry concerns a Reflected Cross-Site Scripting (XSS) in the Featured Page Widget for WordPress (plugin). The description indicates improper neutralization of input during web page generation, enabling a reflected XSS vulnerability. Affected scope is listed as Featured Page Wid...

PT-2025-4507 · Unknown · Yamna Tatheer Knr Author List Widget

Name of the Vulnerable Software and Affected Versions: Yamna Tatheer KNR Author List Widget versions n/a through 3.1.1 Description: The issue is related to an Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting XSS, which allows Reflected XSS. This can ...

PT-2025-4558 · Unknown · Grandslambert Featured Page Widget

The vulnerable software is grandslambert Featured Page Widget, with versions affected ranging from n/a to 2.2. The vulnerability is an improper neutralization of input during web page generation, also known as Cross-site Scripting XSS, which allows for Reflected XSS attacks. This vulnerability is...