CVE-2025-31899

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in wpshopee Awesome Logos awesome-logos allows Reflected XSS.This issue affects Awesome Logos: from n/a through = 1.2...

CVE-2025-31467

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in miro.mannino Flickr Photostream flickr-photostream allows Reflected XSS.This issue affects Flickr Photostream: from n/a through = 3.1.8...

CVE-2025-32207

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Anzar Ahmed Ni WooCommerce Cost Of Goods ni-woocommerce-cost-of-goods allows Stored XSS.This issue affects Ni WooCommerce Cost Of Goods: from n/a through = 3.2.8...

CVE-2025-32195

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Ecwid by Lightspeed Ecommerce Shopping Cart Ecwid Shopping Cart ecwid-shopping-cart allows Stored XSS.This issue affects Ecwid Shopping Cart: from n/a through = 7.0...

CVE-2025-32173 WordPress B Blocks - The ultimate block collection plugin <= 2.0.0 - Stored Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in bPlugins B Blocks - The ultimate block collection allows Stored XSS. This issue affects B Blocks - The ultimate block collection: from n/a through 2.0.0...

CVE-2025-32167 WordPress SurveyJS plugin <= 1.12.20 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in devsoftbaltic SurveyJS allows Stored XSS. This issue affects SurveyJS: from n/a through 1.12.20...

CVE-2025-32166

CVE-2025-32166 affects the Emma for WordPress plugin. Affected version range: Emma for WordPress

CVE-2025-32162

CVE-2025-32162 affects Chamber Dashboard Business Directory (WordPress) up to version 3.3.11. The issue is an authenticated Stored Cross-Site Scripting (XSS) vulnerability caused by improper input neutralization in web page generation. Impact per the document: enables script execution in an authe...

CVE-2025-31407

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in hutsixdigital Tiger allows Stored XSS.This issue affects Tiger: from n/a through 2.0...

CVE-2025-31418

CVE-2025-31418 corresponds to a reflected XSS in the Gravel WordPress theme. Public material confirms Gravel versions up to 1.6 are affected. The CVSSv3.1 score in the provided data is 7.1 (High) with Network attack, user interaction required, and changes in confidentiality/integrity/availability...

CVE-2025-31418 WordPress Gravel theme <= 1.6 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in noonnoo Gravel allows Reflected XSS.This issue affects Gravel: from n/a through 1.6...

CVE-2025-25001

CVE-2025-25001 affects Microsoft Edge (Chromium-based); the issue is an improper neutralization of input during web page generation (XSS) that enables spoofing over a network. Affected product: Microsoft Edge (Chromium-based), including Edge for iOS. Root cause: input handling during page generat...

WordPress plugin Spider Elements – Addons for Elementor 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site scripting vulnerability exists in...

WordPress plugin Motors 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...

WordPress plugin Xpro Elementor Addons 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...

CVE-2025-30844

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Bob Watu Quiz watu allows Reflected XSS.This issue affects Watu Quiz: from n/a through = 3.4.2...

CVE-2025-31563

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Vimal Kava AI Search Bar open-ai-search-bar allows Stored XSS.This issue affects AI Search Bar: from n/a through = 2.1...

CVE-2025-31462

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in rzfarrell CGM Event Calendar cgm-event-calendar allows Reflected XSS.This issue affects CGM Event Calendar: from n/a through = 0.8.5...

CVE-2025-31445

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Sed Lex Pages Order pages-order allows Reflected XSS.This issue affects Pages Order: from n/a through = 1.1.3...

CVE-2025-31837

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in WP Codeus WP Proposals allows Stored XSS. This issue affects WP Proposals: from n/a through 2.3...