CVE-2025-26583: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in videowhisper Video Share VOD video-share-vod allows Reflected XSS.This issue affects Video Share VOD: from n/a through = 2.7.9...

CVE-2025-23466: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in wpsiteeditor Site Editor Google Map site-editor-google-map allows Reflected XSS.This issue affects Site Editor Google Map: from n/a through = 1.0.1...

PT-2025-12821

Name of the Vulnerable Software and Affected Versions NS Simple Intro Loader versions 2.2.3 and earlier Description The issue is related to improper neutralization of input during web page generation, which leads to a Cross-site Scripting XSS vulnerability. Specifically, it allows for Reflected X...

PT-2025-12808

Name of the Vulnerable Software and Affected Versions GhozyLab Gallery for Social Photo versions 1.0.0 through 1.0.0.35 Description The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, which allows Stored XSS. This means that an...

CVE-2025-26742: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in GhozyLab Gallery for Social Photo feed-instagram-lite allows Stored XSS.This issue affects Gallery for Social Photo: from n/a through = 1.0.0.35...

CVE-2025-30571

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in STEdb Corp. STEdb Forms stedb-forms allows SQL Injection.This issue affects STEdb Forms: from n/a through = 1.0.4...

CVE-2025-30553

CVE-2025-30553 (GMO Font Agent) : The GMO Font Agent WordPress plugin is affected up to version 1.6, with an authenticated Stored Cross-Site Scripting vulnerability (type: Cross-site Scripting via improper input neutralization during page generation). The issue can be triggered by an authenticate...

PT-2025-12586

Name of the Vulnerable Software and Affected Versions gopiplus Message ticker versions n/a through 9.3 Description The issue is related to improper neutralization of input during web page generation, which allows for Stored Cross-site Scripting XSS. This means that an attacker can inject maliciou...

CVE-2025-30553: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Z.com byGMO GMO Font Agent gmo-font-agent allows Stored XSS.This issue affects GMO Font Agent: from n/a through = 1.6...

PT-2025-12645

Name of the Vulnerable Software and Affected Versions Easy Page Transition versions n/a through 1.0.1 Description The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, which allows Stored XSS. This means that an attacker can injec...

PT-2025-12638

Name of the Vulnerable Software and Affected Versions WP Parallax Content Slider versions 0.9.8 and earlier Description The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, which allows Stored XSS. This means that an attacker can...

PT-2025-12590

Name of the Vulnerable Software and Affected Versions Cristian Sarov Upload Quota per User versions 1.3 and earlier Description The issue is related to improper neutralization of input during web page generation, which allows for stored cross-site scripting XSS. This means that an attacker can...

CVE-2025-30597: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in iografica IG Shortcodes ig-shortcodes allows DOM-Based XSS.This issue affects IG Shortcodes: from n/a through = 3.1...

CVE-2025-30570: Improper Neutralization of Special Elements used in an SQL Command

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in AliRezaMohammadi دکمه، شبکه اجتماعی خرید dokme allows SQL Injection.This issue affects دکمه، شبکه اجتماعی خرید: from n/a through = 2.0.6...

CVE-2025-30610: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in catchsquare WP Social Widget wp-social-widget allows Stored XSS.This issue affects WP Social Widget: from n/a through = 2.2.7...

CVE-2025-30536: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in zeitwesentech Beautiful Link Preview beautiful-link-preview allows Stored XSS.This issue affects Beautiful Link Preview: from n/a through = 1.5.0...

PT-2025-12620

Name of the Vulnerable Software and Affected Versions Arefly Login Redirect versions 1.0.0 through 1.0.5 Description The issue is related to improper neutralization of input during web page generation, which allows for Stored Cross-site Scripting XSS. This means that an attacker can inject...

PT-2025-12614

Name of the Vulnerable Software and Affected Versions Jahertor WP Featured Entries versions n/a through 1.0 Description The issue is related to an SQL Injection vulnerability due to improper neutralization of special elements used in an SQL command. This allows for SQL Injection attacks...

PT-2025-12589

Name of the Vulnerable Software and Affected Versions Beautiful Link Preview versions 1.5.0 and earlier Description The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, which allows Stored XSS. This means that an attacker can...

PT-2025-12583

Name of the Vulnerable Software and Affected Versions Atikul AI Preloader versions 1.0.2 and earlier Description The issue is related to improper neutralization of input during web page generation, which allows for Stored Cross-site Scripting XSS. This means that an attacker can inject malicious...