CVE-2025-30551

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in smartredfox Pretty file links pretty-file-links allows Stored XSS.This issue affects Pretty file links: from n/a through = 0.9...

CVE-2025-26869

CVE-2025-26869 is a Stored Cross-Site Scripting (XSS) vulnerability in the Build WordPress plugin, affecting builds up to 1.0.3. The CVSS v3.1 base score is 6.5 (Medium) with Network attack vector, Low attack complexity, and user interaction required. The provided connected documents confirm the ...

CVE-2025-30573

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in mrdenny My Default Post Content my-default-post-content allows Stored XSS.This issue affects My Default Post Content: from n/a through = 0.7.3...

CVE-2025-30599

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in wp-maverick WP Parallax Content Slider wp-parallax-content-slider allows Stored XSS.This issue affects WP Parallax Content Slider: from n/a through = 0.9.8...

CVE-2025-30527

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in codetoolbox My Bootstrap Menu my-bootstrap-menu allows Stored XSS.This issue affects My Bootstrap Menu: from n/a through = 1.2.1...

CVE-2025-27014

CVE-2025-27014 describes a Cross-Site Scripting flaw in the WordPress Hostiko theme prior to version 30.1, caused by improper input neutralization during web page generation. The vulnerability affects the Hostiko theme (WordPress plugin/theme) before 30.1 and is characterized by a reflected XSS, ...

CVE-2025-30524

CVE-2025-30524 corresponds to an SQL injection vulnerability in the WordPress Product Catalog (DisplayProduct/Product Catalog). Affected versions are from n/a through 1.0.4. The issue is an improper neutralization of input in SQL commands. Connected sources indicate the vulnerability is currently...

CVE-2025-28934 WordPress Simple Post Series plugin <= 2.4.4 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in chaozh Simple Post Series simple-post-series allows Reflected XSS.This issue affects Simple Post Series: from n/a through = 2.4.4...

CVE-2025-28928 WordPress Are you robot google recaptcha for Wordpress plugin <= 2.2 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in sureshdsk Are you robot google recaptcha for wordpress are-you-robot-recaptcha allows Reflected XSS.This issue affects Are you robot google recaptcha for wordpress: from n/a through = 2.2...

CVE-2025-28935

CVE-2025-28935 is a Reflected Cross-Site Scripting (XSS) vulnerability in the WordPress plugin FancyBox Plus up to version 1.0.1 . The issue is described as an improper neutralization of input during web page generation, enabling reflected XSS attempts. The connected documents provide the same de...

CVE-2025-28911 WordPress Gravity 2 PDF plugin <= 3.1.3 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in gravity2pdf Gravity 2 PDF gf2pdf allows Reflected XSS.This issue affects Gravity 2 PDF: from n/a through = 3.1.3...

CVE-2025-28917

CVE-2025-28917 : WordPress/Plugin Custom Smilies vulnerability with cross-site scripting (Stored XSS) due to improper neutralization of input during web page generation. Affected: Custom Smilies versions up to 2.9.2 (WordPress plugin). Connected documents confirm this CVE ID corresponds to the XS...

CVE-2025-28885

CVE-2025-28885 is a stored XSS vulnerability in Fiverr.com Official Search Box (WordPress plugin “Fiverr.com Official Search Box”). In the vulnerability, input is not properly neutralized during web page generation, enabling stored Cross-Site Scripting. Affects versions up to 1.0.8 (n/a through 1...

CVE-2025-28877

CVE-2025-28877 is a Reflected XSS in the Key4ce osTicket Bridge. The description states affected Software: Key4ce osTicket Bridge, versions from n/a through 1.4.0. The connected data confirms the issue as a reflected cross-site scripting vulnerability, but does not provide specific exploit detail...

CVE-2025-28882 WordPress Omnify plugin <= 2.0.3 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Omnify, Inc. Omnify omnify-widget allows Reflected XSS.This issue affects Omnify: from n/a through = 2.0.3...

CVE-2025-28865 WordPress WP Colorful Tag Cloud plugin <= 2.0.1 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in lionelroux WP Colorful Tag Cloud wp-colorful-tag-cloud allows Reflected XSS.This issue affects WP Colorful Tag Cloud: from n/a through = 2.0.1...

CVE-2025-26575 WordPress Display Post Meta plugin <= 1.5- Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Kyle Maurer Display Post Meta display-post-meta allows Reflected XSS.This issue affects Display Post Meta: from n/a through = 2.4.4...

CVE-2025-26583

CVE-2025-26583 is a Reflected XSS in the WordPress Video Share VOD plugin. The vulnerability arises from improper input neutralization during web page generation, affecting Video Share VOD versions from n/a up to and including 2.7.9. The connected documents confirm the issue and its CVSS-derived ...

CVE-2025-26579 WordPress MicroPayments Paid Membership plugin <= 3.2.4 - Reflected Cross-Site Scripting vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in videowhisper MicroPayments paid-membership allows Reflected XSS.This issue affects MicroPayments: from n/a through = 3.2.4...

CVE-2025-26576 WordPress WP Simple Slideshow Plugin <= 1.0 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in takumin WP Simple Slideshow allows Reflected XSS. This issue affects WP Simple Slideshow: from n/a through 1.0...