CVE-2025-49427

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Ryan Burnette Abbie Expander abbie-expander allows Stored XSS.This issue affects Abbie Expander: from n/a through = 1.0.1...

CVE-2025-49262

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in shaonsina Sina Extension for Elementor sina-extension-for-elementor allows Stored XSS.This issue affects Sina Extension for Elementor: from n/a through = 3.6.1...

CVE-2025-49442

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Mostafa Shahiri Simple Nested Menu simple-nested-menu allows Stored XSS.This issue affects Simple Nested Menu: from n/a through = 1.0...

CVE-2025-28989

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in arildur Read More Login read-more-login allows Stored XSS.This issue affects Read More Login: from n/a through = 2.0.3...

CVE-2025-49326

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Ruben Garcia GamiPress gamipress allows SQL Injection.This issue affects GamiPress: from n/a through = 7.4.5...

CVE-2025-3322

An improper neutralization of inputs used in expression language allows remote code execution with the highest privileges on the server...

CVE-2025-4568

Improper neutralization of input provided by an unauthorized user into changesreferenceid parameter in URL allows for boolean-based Blind SQL Injection attacks...

CVE-2025-49450

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in mhallmann SEPA Girocode sepa-girocode allows Stored XSS.This issue affects SEPA Girocode: from n/a through = 0.5.1...

CVE-2025-49443

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Chris McCoy Bacon Ipsum bacon-ipsum allows Stored XSS.This issue affects Bacon Ipsum: from n/a through = 2.4...

CVE-2025-49326

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Ruben Garcia GamiPress gamipress allows SQL Injection.This issue affects GamiPress: from n/a through = 7.4.5...

CVE-2025-49309

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in HT Plugins HT Team Member ht-team-member allows Stored XSS.This issue affects HT Team Member: from n/a through = 1.1.7...

CVE-2025-49262

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in shaonsina Sina Extension for Elementor allows Stored XSS. This issue affects Sina Extension for Elementor: from n/a through 3.6.1...

CVE-2025-30937

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in stefanledin Responsify WP responsify-wp allows Stored XSS.This issue affects Responsify WP: from n/a through = 1.9.11...

CVE-2025-30638

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in PowieT Powie's Uptime Robot powies-uptime-robot allows Stored XSS.This issue affects Powie's Uptime Robot: from n/a through = 0.9.7...

CVE-2025-30625

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Matt Pramschufer AppBanners appbanners allows Stored XSS.This issue affects AppBanners: from n/a through = 1.5.14...

CVE-2025-30625

CVE-2025-30625 affects the AppBanners WordPress plugin by Matt Pramschufer. The issue is an improper neutralization of input during web page generation, enabling a stored Cross‑Site Scripting (XSS) condition in vulnerable pages. Affected range is AppBanners versions up to 1.5.14 (as per the CVE e...

CVE-2025-30627 WordPress Elegant Visitor Counter plugin <= 3.1 - Cross Site Scripting (XSS) Vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in regolithsjk Elegant Visitor Counter elegant-visitor-counter allows Stored XSS.This issue affects Elegant Visitor Counter: from n/a through = 3.1...

CVE-2025-49322

CVE-2025-49322 affects the WordPress plugin 404 Page by SeedProd. It is a Stored XSS vulnerability in the page generation flow, exploitable only by authenticated attackers (Administrator+). Affected versions are up to 1.0.1; a fix is available in 1.0.2+ (upgrade recommended). CVSS v3.1 base score...

CVE-2025-49309

CVE-2025-49309 affects the WordPress plugin HT Team Member . The vulnerability is a Stored XSS due to improper neutralization of input during web page generation. Affected versions are listed as “from n/a through 1.1.7.” The root cause is described as the plugin failing to neutralize user-control...

CVE-2025-48329

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Daman Jeet Real Time Validation for Gravity Forms real-time-validation-for-gravity-forms allows Reflected XSS.This issue affects Real Time Validation for Gravity Forms: from n/a through = 1.7.0...