CVE-2025-54027 WordPress Support Board <= 3.8.0 - Cross Site Scripting (XSS) Vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Schiocco Support Board supportboard allows Reflected XSS.This issue affects Support Board: from n/a through = 3.8.0...

CVE-2025-54027 WordPress Support Board <= 3.8.0 - Cross Site Scripting (XSS) Vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Schiocco Support Board allows Reflected XSS. This issue affects Support Board: from n/a through 3.8.0...

CVE-2025-54027

CVE-2025-54027 is a reflected XSS in WordPress plugin Support Board (Schiocco) affecting versions up to 3.8.0. The issue arises from improper input neutralization during web page generation, enabling cross-site scripting reflections. CVSS base score is 7.1 (HIGH) with network attack vector, user ...

CVE-2025-54032 WordPress Real Estate Manager Pro Plugin <= 12.7.3 - Cross Site Scripting (XSS) Vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in WebCodingPlace Real Estate Manager Pro allows Reflected XSS. This issue affects Real Estate Manager Pro: from n/a through 12.7.3...

CVE-2025-54032 WordPress Real Estate Manager Pro Plugin <= 12.7.3 - Cross Site Scripting (XSS) Vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in WebCodingPlace Real Estate Manager Pro real-estate-manager-pro allows Reflected XSS.This issue affects Real Estate Manager Pro: from n/a through = 12.7.3...

CVE-2025-54046 WordPress Cost Calculator Plugin <= 7.4 - Cross Site Scripting (XSS) Vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in QuanticaLabs Cost Calculator allows Stored XSS. This issue affects Cost Calculator: from n/a through 7.4...

CVE-2025-54044 WordPress Elite Video Player <= 10.0.5 - Cross Site Scripting (XSS) Vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in CreativeMedia Elite Video Player elite-video-player allows Reflected XSS.This issue affects Elite Video Player: from n/a through = 10.0.5...

CVE-2025-54046 WordPress Cost Calculator Plugin <= 7.4 - Cross Site Scripting (XSS) Vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in QuanticaLabs Cost Calculator ql-cost-calculator allows Stored XSS.This issue affects Cost Calculator: from n/a through = 7.4...

CVE-2025-54046

CVE-2025-54046 affects the WordPress Cost Calculator plugin (QuanticaLabs) for versions up to 7.4. It is a Stored Cross‑Site Scripting (XSS) vulnerability caused by improper input neutralization during web page generation. Exploitation could occur when a user with access to crafted input is able ...

CVE-2025-54055

CVE-2025-54055 is a Reflected XSS in WordPress theme Druco (skygroup Druco) up to version 1.5.2, caused by improper input neutralization during web page generation. Affected: Druco (skygroup) WordPress Theme up to 1.5.2. Impact per sources: allow execution of attacker-controlled scripts in the vi...

CVE-2025-54055 WordPress Druco <= 1.5.2 - Cross Site Scripting (XSS) Vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in skygroup Druco druco allows Reflected XSS.This issue affects Druco: from n/a through = 1.5.2...

CVE-2025-54670

CVE-2025-54670 describes a Reflected XSS in the WordPress plugin oik (bobbingwide oik) for versions up to 4.15.2. The issue is due to improper input neutralization during web page generation. Public sources confirm the vulnerability and CVSSv3.1 base score of 7.1 (High). Connected documents corro...

CVE-2025-54670 WordPress oik Plugin <= 4.15.2 - Cross Site Scripting (XSS) Vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in bobbingwide oik allows Reflected XSS. This issue affects oik: from n/a through 4.15.2...

CVE-2025-6625

CWE-20: Improper Input Validation vulnerability exists that could cause a Denial Of Service when specific crafted FTP command is sent to the device...

Cross-site Scripting (XSS)

microweber/microweber is vulnerable to cross-site scripting XSS. The vulnerability is due to improper input validation due to the last name field in the /projects/profile homepage endpoint allowing injection of malicious scripts...

PT-2025-33975 · Unknown · Revolution Video Player With Bottom Playlist

Name of the Vulnerable Software and Affected Versions: Revolution Video Player With Bottom Playlist versions through 2.9.2 Description: This issue involves improper neutralization of input during web page generation, leading to a reflected cross-site scripting XSS condition. Recommendations: Upda...

PT-2025-33962 · WordPress · Rewish Wp Emmet

Name of the Vulnerable Software and Affected Versions: rewish WP Emmet versions through 0.3.4 Description: The vulnerability involves improper neutralization of input during web page generation, leading to a stored cross-site scripting XSS issue. Recommendations: Update rewish WP Emmet to a versi...

PT-2025-33945 · Unknown · Imran Emu Tc Testimonials

Name of the Vulnerable Software and Affected Versions: Imran Emu TC Testimonials versions through 1.1.1 Description: Improper neutralization of input during web page generation allows for stored cross-site scripting XSS. This issue enables the injection of malicious scripts into web pages...

PT-2025-33953 · Unknown · Dourou Cookie Warning

Name of the Vulnerable Software and Affected Versions: Dourou Cookie Warning versions through 1.3 Description: Improper neutralization of input during web page generation allows for stored cross-site scripting XSS. Recommendations: Update Dourou Cookie Warning to a version later than 1.3...

PT-2025-33960 · WordPress · Badasswp Pending Order Bot

Name of the Vulnerable Software and Affected Versions: badasswp Pending Order Bot versions through 1.0.2 Description: The software contains an Improper Neutralization of Input During Web Page Generation issue, leading to a Stored Cross-site Scripting condition. This allows for the injection of...