CVE-2025-58882

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in w1zzard Simple Text Slider simple-text-slider allows Stored XSS.This issue affects Simple Text Slider: from n/a through = 1.0.5...

CVE-2025-48103

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in mulscully Today's Date Inserter todays-date-inserter allows Stored XSS.This issue affects Today's Date Inserter: from n/a through = 1.2.1...

CVE-2025-58876

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Ali Aghdam Aparat Video Shortcode aparat-shortcode allows Stored XSS.This issue affects Aparat Video Shortcode: from n/a through = 0.2.4...

CVE-2025-58870

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in DeBAAT WP-GraphViz wp-graphviz allows DOM-Based XSS.This issue affects WP-GraphViz: from n/a through = 1.5.1...

CVE-2025-58867

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Remi Corson Easy Download Media Counter easy-download-media-counter allows Stored XSS.This issue affects Easy Download Media Counter: from n/a through = 1.2...

CVE-2025-58850

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in marcshowpass Showpass WordPress Extension showpass allows Stored XSS.This issue affects Showpass WordPress Extension: from n/a through = 4.0.3...

CVE-2025-58842

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in givecloud Donation Forms WP by Givecloud donation-forms-by-givecloud allows Stored XSS.This issue affects Donation Forms WP by Givecloud: from n/a through = 1.0.9...

CVE-2025-58840

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Ibnul H. Custom Team Manager custom-team-manager allows Stored XSS.This issue affects Custom Team Manager: from n/a through = 2.4.2...

CVE-2025-58834

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in gugu short.io wp-shortcm allows DOM-Based XSS.This issue affects short.io: from n/a through = 2.4.2...

CVE-2025-58791

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Arjan Olsder SEO Auto Linker wpa-seo-auto-linker allows Stored XSS.This issue affects SEO Auto Linker: from n/a through = 1.5.3...

CVE-2025-58796

CVE-2025-58796 is a stored XSS in the WordPress plugin “Elementor Element Condition” (dudaster) affecting versions up to 1.0.5. The issue arises from improper input neutralization during web page generation, enabling script injection via crafted input. Public disclosures in multiple sources (incl...

PT-2025-36175

Name of the Vulnerable Software and Affected Versions: Tikolan FW Anker versions through 1.2.6 Description: The software contains an Improper Neutralization of Input During Web Page Generation vulnerability, which allows for Stored Cross-site Scripting XSS. Recommendations: Update Tikolan FW Anke...

WordPress plugin 金数据 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripti...

PT-2025-36131

Name of the Vulnerable Software and Affected Versions: Arjan Olsder SEO Auto Linker versions through 1.5.3 Description: The software contains a cross-site scripting XSS vulnerability due to improper neutralization of input during web page generation. This allows for stored XSS attacks...

WordPress plugin Showpass WordPress Extension 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...

PT-2025-36220

Name of the Vulnerable Software and Affected Versions: Thomas Harris Search Cloud One versions through 2.2.5 Description: The software contains an Improper Neutralization of Input During Web Page Generation issue, which allows for Stored Cross-site Scripting XSS. Recommendations: Update Thomas...

PT-2025-36212

Name of the Vulnerable Software and Affected Versions: pusheco Pushe Web Push Notification versions through 0.5.0 Description: The software contains a cross-site scripting XSS vulnerability due to improper neutralization of input during web page generation. This allows for stored XSS attacks...

WordPress plugin Easy Download Media Counter Cross Site Scripting Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers running PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting vulnerabilit...

PT-2025-36153

Name of the Vulnerable Software and Affected Versions: Stagtools versions through 2.3.8 Description: The software contains an Improper Neutralization of Input During Web Page Generation issue, which allows for Stored Cross-site Scripting XSS. Recommendations: Update Stagtools to a version later...

WordPress plugin Elementor Element Condition 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation. WordPress is a blogging platform developed in the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...