CVE-2025-54032 WordPress Real Estate Manager Pro Plugin <= 12.7.3 - Cross Site Scripting (XSS) Vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in WebCodingPlace Real Estate Manager Pro allows Reflected XSS. This issue affects Real Estate Manager Pro: from n/a through 12.7.3...

CVE-2025-54044 WordPress Elite Video Player <= 10.0.5 - Cross Site Scripting (XSS) Vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in CreativeMedia Elite Video Player elite-video-player allows Reflected XSS.This issue affects Elite Video Player: from n/a through = 10.0.5...

CVE-2025-54046 WordPress Cost Calculator Plugin <= 7.4 - Cross Site Scripting (XSS) Vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in QuanticaLabs Cost Calculator ql-cost-calculator allows Stored XSS.This issue affects Cost Calculator: from n/a through = 7.4...

CVE-2025-54055

CVE-2025-54055 is a Reflected XSS in WordPress theme Druco (skygroup Druco) up to version 1.5.2, caused by improper input neutralization during web page generation. Affected: Druco (skygroup) WordPress Theme up to 1.5.2. Impact per sources: allow execution of attacker-controlled scripts in the vi...

CVE-2025-54055 WordPress Druco <= 1.5.2 - Cross Site Scripting (XSS) Vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in skygroup Druco druco allows Reflected XSS.This issue affects Druco: from n/a through = 1.5.2...

CVE-2025-54670 WordPress oik Plugin <= 4.15.2 - Cross Site Scripting (XSS) Vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in bobbingwide oik allows Reflected XSS. This issue affects oik: from n/a through 4.15.2...

WordPress plugin WP Emmet 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security...

PT-2025-33929 · Unknown · Quantumcloud Simple Link Directory

Name of the Vulnerable Software and Affected Versions: quantumcloud Simple Link Directory affected versions not specified Description: The software contains an improper neutralization of input during web page generation, which results in a reflected cross-site scripting XSS issue. Recommendations...

PT-2025-33977 · Digitalzoomstudio · Comments Capcha Box

Name of the Vulnerable Software and Affected Versions: digitalzoomstudio Comments Capcha Box versions through 1.1 Description: The software contains a Reflected Cross-site Scripting XSS issue due to improper neutralization of input during web page generation. This allows for the injection of...

PT-2025-34017 · Skygroup · Druco

Name of the Vulnerable Software and Affected Versions: skygroup Druco versions through 1.5.2 Description: Improper neutralization of input during web page generation allows reflected cross-site scripting XSS. Recommendations: At the moment, there is no information about a newer version that...

IBM Edge Application Manager 代码问题漏洞

IBM Edge Application Manager is an application from International Business Machines IBM that provides powerful solutions to address the need to deliver enterprise computing power at the edge of the cloud, closer to where the data is being created and at the edge of the enterprise where action nee...

PT-2025-33975 · Unknown · Revolution Video Player With Bottom Playlist

Name of the Vulnerable Software and Affected Versions: Revolution Video Player With Bottom Playlist versions through 2.9.2 Description: This issue involves improper neutralization of input during web page generation, leading to a reflected cross-site scripting XSS condition. Recommendations: Upda...

PT-2025-33962 · WordPress · Rewish Wp Emmet

Name of the Vulnerable Software and Affected Versions: rewish WP Emmet versions through 0.3.4 Description: The vulnerability involves improper neutralization of input during web page generation, leading to a stored cross-site scripting XSS issue. Recommendations: Update rewish WP Emmet to a versi...

PT-2025-33969 · Nootheme · Jobmonster

Name of the Vulnerable Software and Affected Versions: NooTheme Jobmonster versions through 4.7.8 Description: An Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' issue exists in NooTheme Jobmonster, allowing Reflected XSS. Recommendations: At the moment, there i...

WordPress plugin Notice Bar 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation. WordPress is a blogging platform developed in the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A security vulnerability exists in WordPress...

PT-2025-33953 · Unknown · Dourou Cookie Warning

Name of the Vulnerable Software and Affected Versions: Dourou Cookie Warning versions through 1.3 Description: Improper neutralization of input during web page generation allows for stored cross-site scripting XSS. Recommendations: Update Dourou Cookie Warning to a version later than 1.3...

PT-2025-33913 · Creativemindssolutions · Cm Map Locations

Name of the Vulnerable Software and Affected Versions: CreativeMindsSolutions CM Map Locations versions through 2.1.6 Description: Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' in CreativeMindsSolutions CM Map Locations allows Reflected XSS. Recommendations:...

Spree Commerce is vulnerable to RCE through Search API

Spreecommerce versions prior to 0.50.x contain a remote command execution vulnerability in the API's search functionality. Improper input sanitation allows attackers to inject arbitrary shell commands via the searchinstanceeval parameter, which is dynamically invoked using Ruby’s send method. Thi...

WordPress plugin UpStore 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security...

WordPress plugin Cost Calculator 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...