WordPress Tainá Theme <= 0.2.2 is vulnerable to Cross Site Scripting (XSS)

Software Tainá Type Theme Vulnerable versions = 0.2.2 Fixed in N/A OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2025-26919 Patch priority Medium CVSS severity Medium 6.5 Developer Claim ownership PSID a778dbe8c9a1 Credits stealthcopter Required privilege Subscriber...

WordPress Simplish Theme <= 2.6.4 is vulnerable to Cross Site Scripting (XSS)

Software Simplish Type Theme Vulnerable versions = 2.6.4 Fixed in N/A OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2025-22281 Patch priority Medium CVSS severity Medium 6.5 Developer Claim ownership PSID 4b930d5ca50f Credits stealthcopter Required privilege Subscribe...

WordPress Home Services Theme <= 1.2.6 is vulnerable to Cross Site Scripting (XSS)

Software Home Services Type Theme Vulnerable versions = 1.2.6 Fixed in N/A OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2025-26930 Patch priority Medium CVSS severity Medium 6.5 Developer Claim ownership PSID ec753abbf944 Credits stealthcopter Required privilege...

WordPress Demo Awesome plugin <= 1.0.3 - Missing Authorization to Authenticated (Subscriber+) Plugin Activation vulnerability

Missing Authorization to Authenticated Subscriber+ Plugin Activation vulnerability discovered by Krzysztof Zając in WordPress Plugin Demo Awesome versions = 1.0.3...

WordPress Gift Certificate Creator plugin <= 1.1.0 - Reflected Cross-Site Scripting via receip_address Parameter vulnerability

Reflected Cross-Site Scripting via receipaddress Parameter vulnerability discovered by johska in WordPress Plugin Gift Certificate Creator versions = 1.1.0...

WordPress Video Url plugin <= 1.0.0.3 - Reflected Cross-Site Scripting vulnerability

Reflected Cross-Site Scripting vulnerability discovered by johska in WordPress Plugin Video Url versions = 1.0.0.3...

WordPress Advanced Search by My Solr Server plugin <= 2.0.5 - Cross-Site Request Forgery to Stored Cross-Site Scripting vulnerability

Cross-Site Request Forgery to Stored Cross-Site Scripting vulnerability discovered by johska in WordPress Plugin Advanced Search by My Solr Server versions = 2.0.5...

WordPress User Registration plugin < 4.1.3 - Authentication Bypass vulnerability

Authentication Bypass vulnerability discovered by wesley wcraft in WordPress Plugin User Registration versions 4.1.3...

WordPress CGM Event Calendar plugin <= 0.8.5 - Cross Site Scripting (XSS) Vulnerability

Cross Site Scripting XSS Vulnerability discovered by johska in WordPress Plugin CGM Event Calendar versions = 0.8.5...

WordPress NanoSupport plugin <= 0.6.0 - Reflected Cross Site Scripting (XSS) vulnerability

Reflected Cross Site Scripting XSS vulnerability discovered by 0xd4rk5id3 in WordPress Plugin NanoSupport versions = 0.6.0...

WordPress Limit Max IPs Per User plugin <= 1.5 - Reflected Cross Site Scripting (XSS) vulnerability

Reflected Cross Site Scripting XSS vulnerability discovered by johska in WordPress Plugin Limit Max IPs Per User versions = 1.5...

WordPress Delete Post Revision plugin <= 1.1 - Reflected Cross Site Scripting (XSS) vulnerability

Reflected Cross Site Scripting XSS vulnerability discovered by Nguyen Thi Huyen Trang - Skalucy in WordPress Plugin Delete Post Revision versions = 1.1...

WordPress WP Cleaner plugin <= 1.1.5 - Reflected Cross Site Scripting (XSS) vulnerability

Reflected Cross Site Scripting XSS vulnerability discovered by Nguyen Thi Huyen Trang - Skalucy in WordPress Plugin WP Cleaner versions = 1.1.5...

WordPress Pages Order plugin <= 1.1.3 - Reflected Cross Site Scripting (XSS) vulnerability

Reflected Cross Site Scripting XSS vulnerability discovered by Nguyen Thi Huyen Trang - Skalucy in WordPress Plugin Pages Order versions = 1.1.3...

WordPress WP Bookmarks plugin <= 1.1 - Reflected Cross Site Scripting (XSS) vulnerability

Reflected Cross Site Scripting XSS vulnerability discovered by johska in WordPress Plugin WP Bookmarks versions = 1.1...

WordPress Product Table by WBW plugin <= 2.1.4 - Reflected Cross Site Scripting (XSS) vulnerability

Reflected Cross Site Scripting XSS vulnerability discovered by Trương Hữu Phúc truonghuuphuc in WordPress Plugin Product Table by WBW versions = 2.1.4...

WordPress VForm plugin <= 3.1.9 - Reflected Cross Site Scripting (XSS) vulnerability

Reflected Cross Site Scripting XSS vulnerability discovered by astra.r3verii in WordPress Plugin VPSUForm versions = 3.1.9...

WordPress Countdown & Clock plugin <=2.8.8 - Remote Code Execution (RCE) vulnerability

Remote Code Execution RCE vulnerability discovered by astra.r3verii in WordPress Plugin Countdown & Clock versions = 2.8.8...

WordPress HTML Forms plugin <= 1.5.1 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by Abhinav Porwal in WordPress Plugin HTML Forms versions = 1.5.1...

WordPress Watu Quiz plugin <= 3.4.2 - Reflected Cross Site Scripting (XSS) Vulnerability

Reflected Cross Site Scripting XSS Vulnerability discovered by Trương Hữu Phúc truonghuuphuc in WordPress Plugin Watu Quiz versions = 3.4.2...