PT-2025-13412

Name of the Vulnerable Software and Affected Versions VaultRE Contact Form 7 versions 1.0 and earlier Description The issue affects VaultRE Contact Form 7, allowing Stored XSS due to improper neutralization of input during web page generation. This can lead to cross-site scripting. Recommendation...

PT-2025-13063

Name of the Vulnerable Software and Affected Versions Doneren met Mollie versions 2.10.7 and earlier Description The issue is related to improper neutralization of input during web page generation, which allows for Stored Cross-site Scripting XSS. This means that an attacker can inject malicious...

PT-2025-13134

Name of the Vulnerable Software and Affected Versions moreconvert MC Woocommerce Wishlist versions 1.8.9 and earlier Description The issue is related to an SQL Injection vulnerability due to improper neutralization of special elements used in an SQL command. This allows for SQL Injection attacks...

CVE-2025-30918: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Gordon Böhme Structured Content structured-content allows Stored XSS.This issue affects Structured Content: from n/a through = 1.6.3...

CVE-2025-30768: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in mlaza jAlbum Bridge jalbum-bridge allows Stored XSS.This issue affects jAlbum Bridge: from n/a through = 2.0.18...

PT-2025-13159

Name of the Vulnerable Software and Affected Versions WP Posts Carousel versions 1.3.7 and earlier Description The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting. This allows for Stored XSS attacks. Recommendations For WP Posts...

CVE-2025-30899: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in wpeverest User Registration user-registration allows Stored XSS.This issue affects User Registration: from n/a through = 4.0.3...

PT-2025-13157

Name of the Vulnerable Software and Affected Versions codemacher Structured Content versions n/a through 1.6.3 Description The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, which allows Stored XSS. This means that an attacker...

CVE-2025-30818: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in mlaza jAlbum Bridge jalbum-bridge allows DOM-Based XSS.This issue affects jAlbum Bridge: from n/a through = 2.0.17...

PT-2025-13049

Name of the Vulnerable Software and Affected Versions Olaf Lederer EO4WP versions 1.0.8.4 and earlier Description The issue is related to improper neutralization of input during web page generation, also known as 'Cross-site Scripting', which allows stored XSS. Recommendations For Olaf Lederer...

CVE-2025-30763: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Olaf Lederer EO4WP fw-integration-for-emailoctopus allows Stored XSS.This issue affects EO4WP: from n/a through = 1.0.8.4...

PT-2025-13056

Name of the Vulnerable Software and Affected Versions Charitable versions 1.8.4.7 and earlier Description The issue is related to improper neutralization of input during web page generation, which allows for DOM-Based XSS. This is a type of Cross-site Scripting attack. Recommendations For...

CVE-2025-26732: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in burgersoftware StoreBiz storebiz allows DOM-Based XSS.This issue affects StoreBiz: from n/a through = 1.0.32...

PT-2025-13233

Name of the Vulnerable Software and Affected Versions Plugin Devs Blog, Posts and Category Filter for Elementor versions n/a through 2.0.1 Description The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting. This allows for Stored XS...

CVE-2025-22816: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in codetrendy Power Mag power-mag allows DOM-Based XSS.This issue affects Power Mag: from n/a through = 1.1.5...

PT-2025-13064

Name of the Vulnerable Software and Affected Versions cubecolour Audio Album versions 1.5.0 and earlier Description The issue is related to improper neutralization of input during web page generation, which allows for Stored Cross-site Scripting XSS. This means that an attacker can inject malicio...

PT-2025-13264

Name of the Vulnerable Software and Affected Versions Paytm Payment Donation versions through 2.3.3 Description The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting. This allows for Stored XSS attacks. Recommendations For versions...

PT-2025-13263

Name of the Vulnerable Software and Affected Versions Acowebs Product Table For WooCommerce versions 1.2.3 and earlier Description The issue affects the Acowebs Product Table For WooCommerce, allowing Stored XSS due to improper neutralization of input during web page generation. Recommendations F...

PT-2025-13188

Name of the Vulnerable Software and Affected Versions Repute Infosystems ARPrice versions n/a through 4.1.3 Description The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting. This allows for Stored XSS attacks. Recommendations For...

PT-2025-13267

Name of the Vulnerable Software and Affected Versions Notif Bell versions 0.9.8 and earlier Description The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting. This allows for Stored XSS attacks. Recommendations For versions 0.9.8 a...