WordPress Shortcodes Ultimate plugin cross-site scripting vulnerability

WordPress Shortcodes Ultimate plugin is a plugin for WordPress that provides a rich set of visual component features that allow users to insert a wide range of pre-defined shortcodes such as buttons, accordions, image rotations, etc. into post editors, text widgets, or template files, helping to...

WordPress WP-Members Membership plugin cross-site scripting vulnerability

WordPress WP-Members Membership plugin is a free membership plugin for WordPress, which is mainly used to restrict access to website content and support user login, registration and personalized user profile management. WordPress WP-Members Membership plugin suffers from a cross-site scripting...

WordPress plugin My Reservation System 安全漏洞

WordPress My Reservation System plugin is a booking system plugin based on the WordPress platform, which is mainly used for the development of online booking functions for hotels, B&Bs, villas and other accommodation scenarios. WordPress My Reservation System plugin suffers from a cross-site...

firefox: thunderbird: Potential user-assisted code execution in “Copy as cURL” command

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Insufficient escaping in the “Copy as cURL” feature could potentially be used to trick a user into executing unexpected code...

CVE-2025-7959

The Station Pro plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘width' and 'height’ parameter in all versions up to, and including, 2.4.2 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-lev...

CVE-2025-6387

The WP Get The Table plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘url’ parameter in all versions up to, and including, 1.5 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level access an...

CVE-2025-5084

The Post Grid Master plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the ‘argsArray'readmoretext'’ parameter in all versions up to, and including, 3.4.13 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to...

CVE-2025-6588

CVE-2025-6588 is a reflected Cross-Site Scripting vulnerability in the WordPress FunnelCockpit plugin (versions up to and including 1.4.2). The issue arises from insufficient input sanitization and output escaping in the vulnerable plugin, enabling unauthenticated attackers to inject scripts into...

CVE-2025-3669 Supreme Addons for Beaver Builder <= 1.0.9 - Authenticated (Contributor+) Stored Cross-Site Scripting via auto_qrcodesabb Shortcode

The Supreme Addons for Beaver Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's autoqrcodesabb shortcode in all versions up to, and including, 1.0.9 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it...

CVE-2025-8071

CVE-2025-8071 : Mine CloudVod plugin for WordPress has a Stored Cross-Site Scripting (XSS) vulnerability via the audio parameter in all versions up to 2.1.10. The issue arises from insufficient input sanitization and output escaping. It affects authenticated attackers with Contributor-level acces...

CVE-2025-4968

The CVE-2025-4968 entry concerns the WPBakery Page Builder for WordPress plugin (affected: WPBakery Page Builder

WordPress plugin muse.ai video embedding 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation, and WordPress plugin is an application plugin. A cross-site scripting vulnerability exists in WordPress muse.ai video embedding, which stems from insufficient input cleanup and output escaping, and can be exploited by a...

PT-2025-30631 · WordPress · Wpbakery Page Builder For Wordpress

Name of the Vulnerable Software and Affected Versions: WPBakery Page Builder for WordPress versions up to and including 8.4.1 Description: The WPBakery Page Builder for WordPress plugin is susceptible to Stored Cross-Site Scripting through multiple Page Builder elements, including the Copyright...

WordPress plugin Supreme Addons for Beaver Builder 跨站脚本漏洞

WordPress Supreme Addons for Beaver Builder is a plugin that extends the functionality of the Beaver Builder page builder, mainly for enhancing its visual editing capabilities and module extensions. A cross-site scripting vulnerability exists in WordPress Supreme Addons for Beaver Builder, which...

WordPress plugin Structured Content 跨站脚本漏洞

WordPress structured content is a technology that improves search result display and click-through rates by optimizing semantic markup of web page elements e.g., titles, descriptions, images, etc. to enhance search engine understanding of page content. A cross-site scripting vulnerability exists ...

WordPress plugin Mine CloudVod 跨站脚本漏洞

WordPress Mine CloudVod is a plugin for audio and video playback and online education management. WordPress Mine CloudVod suffers from a cross-site scripting vulnerability that stems from insufficient input cleanup and output escaping, which can be exploited by an attacker to inject malicious...

WordPress plugin Voltax Video Player 跨站脚本漏洞

WordPress Voltax Video Player is a video plugin for the WordPress platform, developed by Minute Media, which is mainly used to embed videos and playlists from Minute Media's online video platform into WordPress websites. WordPress Voltax Video Player suffers from a cross-site scripting...

WordPress plugin Station Pro 跨站脚本漏洞

WordPress Station Pro is a plugin designed for the WordPress platform, mainly used to enhance the functionality of the website and provide audio streaming management solutions. WordPress Station Pro suffers from a cross-site scripting vulnerability that stems from insufficient input cleanup and...

WordPress plugin ElementsKit Elementor Addons and Templates 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. WordPress plugin is an application plugin that supports personal blog sites on PHP and MySQL servers. A cross-site scripting vulnerability exists in...

WordPress plugin Post Grid Master 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation, and WordPress plugin is an application plugin. A cross-site scripting vulnerability exists in WordPress Post Grid Master, which stems from insufficient input cleanup and output escaping, and can be exploited by an...