CVE-2025-32180

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in mojofywp Product Carousel For WooCommerce – WoorouSell woorousell allows Stored XSS.This issue affects Product Carousel For WooCommerce – WoorouSell: from n/a through = 1.1.0...

CVE-2025-32180

CVE-2025-32180 references a Missing Authorization vulnerability in the WordPress plugin CSS3 Tooltips for WordPress (affected: versions up to 1.8). The issue allows exploitation of improperly configured access control, with an attack vector over the network, and a base CVSS v3.1 score of 4.3 (Imp...

WordPress CSS3 Tooltips for WordPress plugin <= 1.8 - Broken Access Control Vulnerability

Broken Access Control Vulnerability discovered by Tran Nguyen Bao KhanhVCI - VNPT in WordPress Plugin CSS3 Tooltips for WordPress versions = 1.8...