EUVD-2025-35434

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in purethemes WorkScout-Core workscout-core allows Reflected XSS.This issue affects WorkScout-Core: from n/a through 1.7.06...

CVE-2025-59571

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in purethemes WorkScout-Core workscout-core allows Reflected XSS.This issue affects WorkScout-Core: from n/a through 1.7.06...

CVE-2025-59572

CVE-2025-59572 is a Cross‑Site Request Forgery (CSRF) vulnerability in the WordPress plugin set related to the WorkScout Core (WorkScout-Core). The description indicates the issue affects WorkScout-Core versions prior to 1.7.06 (i.e.,