CVE-2025-23472 WordPress Flexo Slider plugin <= 1.0013 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in flexostudio Flexo Slider flexo-slider allows Reflected XSS.This issue affects Flexo Slider: from n/a through = 1.0013...

PT-2025-9455

Name of the Vulnerable Software and Affected Versions WP Church Center versions 1.3.3 and earlier Description The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, which allows Reflected XSS. Recommendations For versions 1.3.3 and...

PT-2025-9467

Name of the Vulnerable Software and Affected Versions NotFound Mobile versions 1.3.3 and earlier Description The issue is related to Improper Neutralization of Input During Web Page Generation, also known as 'Cross-site Scripting', which allows Reflected XSS. Recommendations For versions 1.3.3 an...

PT-2025-9361

Name of the Vulnerable Software and Affected Versions G Web Pro Store Locator versions through 2.0.1 Description The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, allowing Reflected XSS. Recommendations For versions through...

PT-2025-9403

Name of the Vulnerable Software and Affected Versions NotFound Ps Ads Pro versions 1.0.0 and earlier Description The issue is related to Improper Neutralization of Input During Web Page Generation, also known as 'Cross-site Scripting', which allows Reflected XSS. Recommendations For versions 1.0....

PT-2025-9496

Name of the Vulnerable Software and Affected Versions WOO Codice Fiscale versions 1.6.3 and earlier Description The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting. This allows for Reflected XSS attacks. Recommendations For...

PT-2025-9385

Name of the Vulnerable Software and Affected Versions Page Health-O-Meter versions n/a through 2.0 Description The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, which allows Reflected XSS. Recommendations For versions n/a...

PT-2025-9417

Name of the Vulnerable Software and Affected Versions PillarDev Easy Automatic Newsletter Lite versions 3.2.0 and earlier Description The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, allowing Reflected XSS. Recommendations Fo...

PT-2025-9400

Name of the Vulnerable Software and Affected Versions ComparePress versions 2.0.8 and earlier Description The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, allowing Reflected XSS attacks. Recommendations For versions 2.0.8 and...

PT-2025-9441

Name of the Vulnerable Software and Affected Versions Top Bar – PopUps – by WPOptin versions 2.0.8 and earlier Description The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting. This allows for Reflected XSS attacks. Recommendation...

PT-2025-9434

Name of the Vulnerable Software and Affected Versions Yahoo BOSS versions 0.7 and earlier Description The issue affects Yahoo BOSS, allowing for Reflected XSS due to improper neutralization of input during web page generation. This is a type of Cross-site Scripting vulnerability. Recommendations...

PT-2025-9370

Name of the Vulnerable Software and Affected Versions Texteller versions 1.3.0 and earlier Description The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, allowing Reflected XSS attacks. Recommendations For versions 1.3.0 and...

PT-2025-9437

Name of the Vulnerable Software and Affected Versions NotFound Social Links versions n/a through 1.2 Description The issue is related to an SQL Injection vulnerability, specifically a Blind SQL Injection, due to the improper neutralization of special elements used in an SQL command. Recommendatio...

CVE-2025-27278: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in David Ghedini AcuGIS Leaflet Maps mapfig-premium-leaflet-map-maker allows Reflected XSS.This issue affects AcuGIS Leaflet Maps: from n/a through = 5.1.1.0...

CVE-2025-23762: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Justin Sternberg DsgnWrks Twitter Importer dsgnwrks-twitter-importer allows Reflected XSS.This issue affects DsgnWrks Twitter Importer: from n/a through = 1.1.4...

PT-2025-9415

Name of the Vulnerable Software and Affected Versions Mojo Under Construction versions 1.1.2 and earlier Description The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, allowing Reflected XSS. Recommendations For versions 1.1.2...

PT-2025-9354

Name of the Vulnerable Software and Affected Versions NotFound WP FPO versions 1.0 and earlier Description The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, allowing Reflected XSS. Recommendations For versions 1.0 and earlier,...

PT-2025-9420

Name of the Vulnerable Software and Affected Versions Local Shipping Labels for WooCommerce versions 1.0.0 and earlier Description The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, allowing Reflected XSS. Recommendations For...

PT-2025-9462

Name of the Vulnerable Software and Affected Versions Migrate Posts versions from n/a through 1.0 Description The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, allowing Reflected XSS. Recommendations For versions from n/a...

PT-2025-9343

Name of the Vulnerable Software and Affected Versions melascrivi versions 1.4 and earlier Description The issue affects melascrivi, allowing Reflected XSS due to improper neutralization of input during web page generation. This can lead to Cross-site Scripting. Recommendations For melascrivi...