CVE-2025-30979

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in gopiplus Pixelating image slideshow gallery pixelating-image-slideshow-gallery allows SQL Injection.This issue affects Pixelating image slideshow gallery: from n/a through = 8.0...

CVE-2025-30947

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in gopiplus Cool fade popup cool-fade-popup allows Blind SQL Injection.This issue affects Cool fade popup: from n/a through = 10.1...

CVE-2025-30983

CVE-2025-30983 affects the gopiplus Card flip image slideshow (WordPress plugin) with versions 1.5 and earlier. The vulnerability is DOM-based XSS caused by improper input neutralization during web page generation. Public sources indicate the issue exists and is currently unpatched; no confirmed ...

CVE-2025-30979

CVE-2025-30979 affects the WordPress plugin gopiplus Pixelating image slideshow gallery (versions n/a–8.0). The root cause is improper neutralization of special elements in SQL commands, yielding an SQL Injection vulnerability. Impact is high: potential exposure of data and data integrity risk; C...

CVE-2025-30979 WordPress Pixelating image slideshow gallery plugin <= 8.0 - SQL Injection Vulnerability

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in gopiplus Pixelating image slideshow gallery pixelating-image-slideshow-gallery allows SQL Injection.This issue affects Pixelating image slideshow gallery: from n/a through = 8.0...

CVE-2025-30969

CVE-2025-30969 affects the WordPress plugin iFrame Images Gallery (versions

CVE-2025-30969 WordPress iFrame Images Gallery plugin <= 9.0 - SQL Injection Vulnerability

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in gopiplus iFrame Images Gallery wp-iframe-images-gallery allows SQL Injection.This issue affects iFrame Images Gallery: from n/a through = 9.0...

CVE-2025-30969 WordPress iFrame Images Gallery plugin <= 9.0 - SQL Injection Vulnerability

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in gopiplus iFrame Images Gallery wp-iframe-images-gallery allows SQL Injection.This issue affects iFrame Images Gallery: from n/a through = 9.0...

CVE-2025-30947 WordPress Cool fade popup plugin <= 10.1 - SQL Injection Vulnerability

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in gopiplus Cool fade popup cool-fade-popup allows Blind SQL Injection.This issue affects Cool fade popup: from n/a through = 10.1...

CVE-2025-30947

CVE-2025-30947 is a SQL Injection vulnerability in the WordPress plugin Cool fade popup (gopiplus) up to version 10.1 . The issue arises from improper neutralization of special elements in SQL commands, enabling a blind SQL injection. Public references indicate the affected plugin versions are

PT-2025-27890 · Unknown · Gopiplus Card Flip Image Slideshow

Name of the Vulnerable Software and Affected Versions: gopiplus Card flip image slideshow versions 1.5 and earlier Description: The issue is related to improper neutralization of input during web page generation, which allows for DOM-Based Cross-site Scripting XSS. This means that an attacker cou...

PT-2025-27889 · Unknown · Gopiplus Pixelating Image Slideshow Gallery

Name of the Vulnerable Software and Affected Versions: gopiplus Pixelating image slideshow gallery versions n/a through 8.0 Description: The issue is related to an SQL Injection vulnerability due to improper neutralization of special elements used in an SQL command. This allows for SQL Injection...

PT-2025-27888 · Unknown · Gopiplus Iframe Images Gallery

Name of the Vulnerable Software and Affected Versions: gopiplus iFrame Images Gallery versions prior to 9.0 Description: The issue is related to the improper neutralization of special elements used in an SQL command, which allows for SQL injection. This is a problem where an attacker can inject...

PT-2025-27887 · Unknown · Gopiplus Cool Fade Popup

Name of the Vulnerable Software and Affected Versions: gopiplus Cool fade popup versions prior to 10.1 Description: The issue is related to an improper neutralization of special elements used in an SQL command, also known as 'SQL Injection', which allows Blind SQL Injection. Recommendations: For...

CVE-2025-39397

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in [email protected] Anything Popup anything-popup allows Reflected XSS.This issue affects Anything Popup: from n/a through = 7.3...

CVE-2025-30533

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in gopiplus Message ticker message-ticker allows Stored XSS.This issue affects Message ticker: from n/a through = 9.3...

CVE-2025-30533

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in gopiplus Message ticker message-ticker allows Stored XSS.This issue affects Message ticker: from n/a through = 9.3...

CVE-2025-30533

CVE-2025-30533 is an authenticated stored XSS vulnerability in the WordPress plugin Message ticker (version ≤ 9.3). The vulnerability allows an attacker with Administrator+ privileges to inject malicious script through input during web page generation, leading to stored Cross-Site Scripting. The ...

WordPress Content Text Slider On Post 6.8 Cross Site Scripting

Document Title: =============== Wordpress Content Text Slider on Post 6.8 - Persistent Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1655 Release Date: ============= 2015-12-07 Vulnerability Laboratory ID VL-ID:...

WP Content Text Slider on Post 6.8 - Persistent Vulnerability

Document Title: =============== WP Content Text Slider on Post 6.8 - Persistent Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1655 Release Date: ============= 2015-12-07 Vulnerability Laboratory ID VL-ID:...