WordPress plugin SHOUT - HTML5 Radio Player With Ads - ShoutCast和IceCast Support 跨站脚本漏洞

WordPress and the WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. WordPress plugin is an application plugin that supports personal blog sites on PHP and MySQL servers. A security vulnerability exists in WordPress plugi...

PT-2025-33962 · WordPress · Rewish Wp Emmet

Name of the Vulnerable Software and Affected Versions: rewish WP Emmet versions through 0.3.4 Description: The vulnerability involves improper neutralization of input during web page generation, leading to a stored cross-site scripting XSS issue. Recommendations: Update rewish WP Emmet to a versi...

WordPress plugin Jobmonster 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...

PT-2025-33936 · WordPress · Themify Audio Dock

Name of the Vulnerable Software and Affected Versions: Themify Audio Dock versions through 2.0.5 Description: The software contains an Improper Neutralization of Input During Web Page Generation issue, leading to a Stored Cross-site Scripting condition. This allows for the injection of malicious...

PT-2025-33945 · Unknown · Imran Emu Tc Testimonials

Name of the Vulnerable Software and Affected Versions: Imran Emu TC Testimonials versions through 1.1.1 Description: Improper neutralization of input during web page generation allows for stored cross-site scripting XSS. This issue enables the injection of malicious scripts into web pages...

PT-2025-33977 · Digitalzoomstudio · Comments Capcha Box

Name of the Vulnerable Software and Affected Versions: digitalzoomstudio Comments Capcha Box versions through 1.1 Description: The software contains a Reflected Cross-site Scripting XSS issue due to improper neutralization of input during web page generation. This allows for the injection of...

PT-2025-33953 · Unknown · Dourou Cookie Warning

Name of the Vulnerable Software and Affected Versions: Dourou Cookie Warning versions through 1.3 Description: Improper neutralization of input during web page generation allows for stored cross-site scripting XSS. Recommendations: Update Dourou Cookie Warning to a version later than 1.3...

PT-2025-34017 · Skygroup · Druco

Name of the Vulnerable Software and Affected Versions: skygroup Druco versions through 1.5.2 Description: Improper neutralization of input during web page generation allows reflected cross-site scripting XSS. Recommendations: At the moment, there is no information about a newer version that...

WordPress plugin WP Emmet 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security...

PT-2025-33913 · Creativemindssolutions · Cm Map Locations

Name of the Vulnerable Software and Affected Versions: CreativeMindsSolutions CM Map Locations versions through 2.1.6 Description: Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' in CreativeMindsSolutions CM Map Locations allows Reflected XSS. Recommendations:...

PT-2025-33960 · WordPress · Badasswp Pending Order Bot

Name of the Vulnerable Software and Affected Versions: badasswp Pending Order Bot versions through 1.0.2 Description: The software contains an Improper Neutralization of Input During Web Page Generation issue, leading to a Stored Cross-site Scripting condition. This allows for the injection of...

PT-2025-33954 · WordPress · Laposta Woocommerce

Name of the Vulnerable Software and Affected Versions: Laposta WooCommerce versions through 1.9.1 Description: This issue involves improper neutralization of input during web page generation, leading to a Stored Cross-Site Scripting XSS condition. Successful exploitation could allow an attacker t...

PT-2025-34005 · Unknown · Schiocco Support Board

Name of the Vulnerable Software and Affected Versions: Schiocco Support Board versions through 3.8.0 Description: Improper neutralization of input during web page generation allows reflected cross-site scripting XSS. Recommendations: Update Schiocco Support Board to a version later than 3.8.0...

PT-2025-33946 · Vikas Sharma · Iframe Block

Name of the Vulnerable Software and Affected Versions: iFrame Block versions n/a through 0.1.1 Description: This issue involves improper neutralization of input during web page generation, leading to a Stored Cross-site Scripting XSS condition in Vikas Sharma iFrame Block. Successful exploitation...

PT-2025-33926 · WordPress · Lambertgroup Universal Video Player - Addon For Wpbakery Page Builder

Name of the Vulnerable Software and Affected Versions: LambertGroup Universal Video Player - Addon for WPBakery Page Builder versions through 3.2.1 Description: The software contains an Improper Neutralization of Input During Web Page Generation issue, which allows for Reflected Cross-site...

WordPress plugin Rentsyst 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security...

PT-2025-33955 · Unknown · Thiudis Custom Menu

Name of the Vulnerable Software and Affected Versions: thiudis Custom Menu versions through 1.8 Description: Improper neutralization of input during web page generation allows for stored cross-site scripting XSS. Recommendations: Update thiudis Custom Menu to a version later than 1.8...

WordPress plugin JetEngine 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security...

PT-2025-33950 · Unknown · Aelora Iframe Wrapper

Name of the Vulnerable Software and Affected Versions: Aelora iframe Wrapper versions n/a through 0.1.1 Description: Aelora iframe Wrapper is susceptible to a DOM-Based Cross-Site Scripting issue due to improper neutralization of input during web page generation. Recommendations: Update Aelora...

WordPress plugin Apollo - Sticky Full Width HTML5 Audio Player Cross-Site Scripting Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A security vulnerability exists in WordPres...