CVE-2025-30893

CVE-2025-30893 affects LeadConnector plugin for WordPress (LeadConnector

CVE-2025-30873

CVE-2025-30873 is a stored XSS in Greenshift (Greenshift – animation and page builder blocks) that affected Greenshift up to and including 11.0.2 and required user interaction to exploit. The entry notes an improper neutralization of input during web page generation as the root cause. Exploitatio...

CVE-2025-30780

CVE-2025-30780 is a Stored XSS vulnerability in the Audio Album WordPress plugin (Affecting Audio Album:

CVE-2025-30776 WordPress Sitekit plugin <= 1.8 - Cross Site Scripting (XSS) Vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in webvitaly Sitekit sitekit allows Stored XSS.This issue affects Sitekit: from n/a through = 1.8...

WordPress plugin City Store 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...

WordPress plugin Job Colors for WP Job Manager 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...

WordPress plugin User Registration 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site scripting vulnerability exists in...

CVE-2025-28935

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in puzich Fancybox Plus fancybox-plus allows Reflected XSS.This issue affects Fancybox Plus: from n/a through = 1.0.1...

CVE-2025-28924

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Simbul ZenphotoPress zenphotopress allows Reflected XSS.This issue affects ZenphotoPress: from n/a through = 1.8...

CVE-2025-27267

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in srcoley Random Quotes random-quotes allows Reflected XSS.This issue affects Random Quotes: from n/a through = 1.3...

CVE-2025-26575

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Kyle Maurer Display Post Meta display-post-meta allows Reflected XSS.This issue affects Display Post Meta: from n/a through = 2.4.4...

CVE-2025-26565

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in kagla GNUPress gnupress allows Reflected XSS.This issue affects GNUPress: from n/a through = 0.2.9...

CVE-2025-26537

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in rolomak GDPR Tools gdpr-tools allows Stored XSS.This issue affects GDPR Tools: from n/a through = 1.0.2...

CVE-2025-26541

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in CodeSolz Bitcoin / AltCoin Payment Gateway for WooCommerce woo-altcoin-payment-gateway allows Reflected XSS.This issue affects Bitcoin / AltCoin Payment Gateway for WooCommerce: from n/a through =...

CVE-2025-26542

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Dang Ngoc Binh Zalo Live Chat zalo-live-chat allows Reflected XSS.This issue affects Zalo Live Chat: from n/a through = 1.1.0...

CVE-2025-30551

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in smartredfox Pretty file links pretty-file-links allows Stored XSS.This issue affects Pretty file links: from n/a through = 0.9...

CVE-2025-26869

CVE-2025-26869 is a Stored Cross-Site Scripting (XSS) vulnerability in the Build WordPress plugin, affecting builds up to 1.0.3. The CVSS v3.1 base score is 6.5 (Medium) with Network attack vector, Low attack complexity, and user interaction required. The provided connected documents confirm the ...

CVE-2025-30599

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in wp-maverick WP Parallax Content Slider wp-parallax-content-slider allows Stored XSS.This issue affects WP Parallax Content Slider: from n/a through = 0.9.8...

CVE-2025-30527

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in codetoolbox My Bootstrap Menu my-bootstrap-menu allows Stored XSS.This issue affects My Bootstrap Menu: from n/a through = 1.2.1...

CVE-2025-27014

CVE-2025-27014 describes a Cross-Site Scripting flaw in the WordPress Hostiko theme prior to version 30.1, caused by improper input neutralization during web page generation. The vulnerability affects the Hostiko theme (WordPress plugin/theme) before 30.1 and is characterized by a reflected XSS, ...