PT-2025-38942

Name of the Vulnerable Software and Affected Versions JS Morisset JSM file get contents Shortcode versions through 2.7.1 Description A flaw exists in JS Morisset JSM file get contents Shortcode that allows for Stored Cross-site Scripting XSS. This issue is due to improper neutralization of input...

CVE-2025-58227: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Alexander Lueken Podlove Subscribe button podlove-subscribe-button allows Stored XSS.This issue affects Podlove Subscribe button: from n/a through = 1.3.11...

PT-2025-38871

Name of the Vulnerable Software and Affected Versions douglaskarr List Child Pages Shortcode versions through 1.3.1 Description The software contains a flaw due to improper handling of input during the creation of web pages, specifically a Cross-site Scripting issue. This allows for Stored XSS,...

PT-2025-38816

Name of the Vulnerable Software and Affected Versions GhozyLab Gallery Lightbox versions through 1.0.0.41 Description The software contains a flaw due to improper input handling during web page creation, leading to a Cross-site Scripting XSS issue. Specifically, the vulnerability allows for Store...

PT-2025-38823

Name of the Vulnerable Software and Affected Versions Chad Butler WP-Members versions through 3.5.4.2 Description The software contains a flaw related to improper input handling during web page generation, specifically a Cross-site Scripting issue. This allows for Stored XSS attacks. The issue...

PT-2025-38803

Name of the Vulnerable Software and Affected Versions 100plugins Open User Map versions through 1.4.14 Description The software contains a flaw due to improper neutralization of input during web page generation, leading to a DOM-Based Cross-site Scripting issue. This allows for the execution of...

PT-2025-38900

Name of the Vulnerable Software and Affected Versions Rustaurius Front End Users versions through 3.2.33 Description A flaw exists in Rustaurius Front End Users that allows for Stored Cross-site Scripting XSS. This issue arises from improper neutralization of input during web page generation...

PT-2025-38917

Name of the Vulnerable Software and Affected Versions dtbaker StylePress for Elementor versions through 1.2.1 Description A flaw exists in dtbaker StylePress for Elementor that allows for Stored Cross-Site Scripting XSS. This issue arises from improper handling of user-supplied data during web pa...

PT-2025-38980

Name of the Vulnerable Software and Affected Versions WebWizards MarketKing versions through 2.0.92 Description A flaw exists in WebWizards MarketKing that allows for Stored Cross-site Scripting XSS. This issue is due to improper neutralization of input during web page generation. Successful...

WordPress plugin Bg Church Memos 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform has the ability to set up personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A cross-site...

PT-2025-38895

Name of the Vulnerable Software and Affected Versions bdthemes ZoloBlocks versions through 2.3.9 Description A flaw exists in bdthemes ZoloBlocks that allows for DOM-Based Cross-Site Scripting XSS. This issue is due to improper neutralization of input during web page generation. The vulnerability...

PT-2025-38777

Name of the Vulnerable Software and Affected Versions WP Chill Passster versions through 4.2.18 Description The software contains a flaw related to improper handling of user-supplied data during web page creation, which can lead to Cross-site Scripting XSS. This allows for the injection of...

PT-2025-38876

Name of the Vulnerable Software and Affected Versions NGG Smart Image Search versions through 3.4.3 Description The software contains a flaw related to improper input handling during web page generation, specifically a Stored Cross-site Scripting issue. This allows for the injection of malicious...

PT-2025-38941

Name of the Vulnerable Software and Affected Versions Themepoints Carousel Ultimate versions through 1.8 Description The software contains a flaw related to improper input handling during web page creation, which allows for Stored Cross-site Scripting XSS. This issue enables malicious code...

WordPress plugin Library Bookshelves 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A cross-site scripting...

WordPress plugin Sitekit 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A cross-site...

PT-2025-38836

Name of the Vulnerable Software and Affected Versions husani WP Subtitle versions through 3.4.1 Description The software contains a flaw related to improper input handling during web page generation, which allows for Stored Cross-Site Scripting XSS. This means that malicious code can be injected...

PT-2025-39044

Name of the Vulnerable Software and Affected Versions CubeWP versions through 1.1.26 Description The software contains a flaw related to improper input handling during web page creation, which can lead to Cross-site Scripting XSS. This specific instance is a Stored XSS issue, meaning malicious...

CVE-2025-57986: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in husani WP Subtitle wp-subtitle allows Stored XSS.This issue affects WP Subtitle: from n/a through = 3.4.1...

CVE-2025-57974: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in tuyennv TZ PlusGallery tz-plus-gallery allows Stored XSS.This issue affects TZ PlusGallery: from n/a through = 1.5.5...