CVE-2025-54055 WordPress Druco <= 1.5.2 - Cross Site Scripting (XSS) Vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in skygroup Druco druco allows Reflected XSS.This issue affects Druco: from n/a through = 1.5.2...

CVE-2025-54670

CVE-2025-54670 describes a Reflected XSS in the WordPress plugin oik (bobbingwide oik) for versions up to 4.15.2. The issue is due to improper input neutralization during web page generation. Public sources confirm the vulnerability and CVSSv3.1 base score of 7.1 (High). Connected documents corro...

CVE-2025-54670 WordPress oik Plugin <= 4.15.2 - Cross Site Scripting (XSS) Vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in bobbingwide oik allows Reflected XSS. This issue affects oik: from n/a through 4.15.2...

CVE-2025-6625

CWE-20: Improper Input Validation vulnerability exists that could cause a Denial Of Service when specific crafted FTP command is sent to the device...

Cross-site Scripting (XSS)

microweber/microweber is vulnerable to cross-site scripting XSS. The vulnerability is due to improper input validation due to the last name field in the /projects/profile homepage endpoint allowing injection of malicious scripts...

WordPress plugin SHOUT - HTML5 Radio Player With Ads - ShoutCast和IceCast Support 跨站脚本漏洞

WordPress and the WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. WordPress plugin is an application plugin that supports personal blog sites on PHP and MySQL servers. A security vulnerability exists in WordPress plugi...

PT-2025-33960 · WordPress · Badasswp Pending Order Bot

Name of the Vulnerable Software and Affected Versions: badasswp Pending Order Bot versions through 1.0.2 Description: The software contains an Improper Neutralization of Input During Web Page Generation issue, leading to a Stored Cross-site Scripting condition. This allows for the injection of...

WordPress plugin Jobmonster 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...

PT-2025-33936 · WordPress · Themify Audio Dock

Name of the Vulnerable Software and Affected Versions: Themify Audio Dock versions through 2.0.5 Description: The software contains an Improper Neutralization of Input During Web Page Generation issue, leading to a Stored Cross-site Scripting condition. This allows for the injection of malicious...

PT-2025-33977 · Digitalzoomstudio · Comments Capcha Box

Name of the Vulnerable Software and Affected Versions: digitalzoomstudio Comments Capcha Box versions through 1.1 Description: The software contains a Reflected Cross-site Scripting XSS issue due to improper neutralization of input during web page generation. This allows for the injection of...

WordPress plugin WP Emmet 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security...

PT-2025-33975 · Unknown · Revolution Video Player With Bottom Playlist

Name of the Vulnerable Software and Affected Versions: Revolution Video Player With Bottom Playlist versions through 2.9.2 Description: This issue involves improper neutralization of input during web page generation, leading to a reflected cross-site scripting XSS condition. Recommendations: Upda...

PT-2025-33913 · Creativemindssolutions · Cm Map Locations

Name of the Vulnerable Software and Affected Versions: CreativeMindsSolutions CM Map Locations versions through 2.1.6 Description: Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' in CreativeMindsSolutions CM Map Locations allows Reflected XSS. Recommendations:...

PT-2025-34017 · Skygroup · Druco

Name of the Vulnerable Software and Affected Versions: skygroup Druco versions through 1.5.2 Description: Improper neutralization of input during web page generation allows reflected cross-site scripting XSS. Recommendations: At the moment, there is no information about a newer version that...

PT-2025-33962 · WordPress · Rewish Wp Emmet

Name of the Vulnerable Software and Affected Versions: rewish WP Emmet versions through 0.3.4 Description: The vulnerability involves improper neutralization of input during web page generation, leading to a stored cross-site scripting XSS issue. Recommendations: Update rewish WP Emmet to a versi...

PT-2025-33953 · Unknown · Dourou Cookie Warning

Name of the Vulnerable Software and Affected Versions: Dourou Cookie Warning versions through 1.3 Description: Improper neutralization of input during web page generation allows for stored cross-site scripting XSS. Recommendations: Update Dourou Cookie Warning to a version later than 1.3...

PT-2025-33945 · Unknown · Imran Emu Tc Testimonials

Name of the Vulnerable Software and Affected Versions: Imran Emu TC Testimonials versions through 1.1.1 Description: Improper neutralization of input during web page generation allows for stored cross-site scripting XSS. This issue enables the injection of malicious scripts into web pages...

PT-2025-33918 · WordPress · Youtube Vimeo Video Player/Slider Wp Plugin

Name of the Vulnerable Software and Affected Versions: Youtube Vimeo Video Player and Slider WP Plugin versions through 3.8 Description: The vulnerability involves improper neutralization of input during web page generation, leading to a reflected cross-site scripting XSS issue. Recommendations:...

PT-2025-33934 · Wen Solutions · Wen Solutions Notice Bar

Name of the Vulnerable Software and Affected Versions: WEN Solutions Notice Bar versions through 3.1.3 Description: The software contains an Improper Neutralization of Input During Web Page Generation issue, leading to Stored Cross-site Scripting XSS. This allows for the injection of malicious...

WordPress plugin JetEngine 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security...