CVE-2025-23576

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in cfuze WP Intro.JS wp-intro-js-tours allows Reflected XSS.This issue affects WP Intro.JS: from n/a through = 1.1...

CVE-2025-23570

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Mitchell Bundy WP Social Links wp-social-links allows Reflected XSS.This issue affects WP Social Links: from n/a through = 0.3.1...

CVE-2025-23538

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Sophia M Williams WP Contest wp-contest allows Reflected XSS.This issue affects WP Contest: from n/a through = 1.0.0...

CVE-2025-23496

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in husani WP FPO wp-fpo allows Reflected XSS.This issue affects WP FPO: from n/a through = 1.0...

CVE-2025-23446

Cross-Site Request Forgery CSRF vulnerability in KokoenDE WP SpaceContent wp-spacecontent allows Stored XSS.This issue affects WP SpaceContent: from n/a through = 0.4.5...

CVE-2025-25142

CVE-2025-25142 describes a Stored XSS vulnerability in the WordPress WP Less Compiler plugin (versions up to 1.3.0). The issue arises from improper neutralization of input during web page generation, allowing attacker-supplied input to be stored and later reflected in pages. The advisory lists WP...

CVE-2025-25161

CVE-2025-25161 concerns the WordPress plugin WP Find Your Nearest (v <= 0.3.1). The connected Red Hat and CVE records describe a CSRF to Settings Change vulnerability that can be exploited to modify plugin settings, implying an unauthorized action may be performed by an attacker authenticated ...

CVE-2025-25133

CVE-2025-25133 describes a Reflected Cross-Site Scripting vulnerability in the WordPress WP Frontend Submit plugin (affecting versions from n/a through 1.1.0). Technical details in connected sources confirm the issue: improper input handling during web page generation enabling XSS. CVSS v3.1 base...

CVE-2025-25109

CVE-2025-25109 affects WP Vehicle Manager

CVE-2025-23956 WordPress WP Easy Post Mailer Plugin <= 0.64 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Richard Leishman WP Easy Post Mailer wp-mailer allows Reflected XSS.This issue affects WP Easy Post Mailer: from n/a through = 0.64...

CVE-2025-23739

CVE-2025-23739 is a Reflected Cross-Site Scripting vulnerability in the WordPress plugin WP Ultimate Reviews FREE (NotFound) affecting versions up to 1.0.2. The issue results from improper neutralization of input during web page generation. The available documents confirm the vulnerability and im...

CVE-2025-23613

WordPress WP Journal plugin

CVE-2025-23586 WordPress WP Post Category Notifications plugin <= 1.0 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in MAL73049 WP Post Category Notifications wp-post-category-notifications allows Reflected XSS.This issue affects WP Post Category Notifications: from n/a through = 1.0...

CVE-2025-23586

CVE-2025-23586 concerns the WordPress plugin WP Post Category Notifications (versions &lt;= 1.0). The vulnerability is a reflected Cross-Site Scripting (XSS) flaw caused by improper neutralization of input during web page generation, enabling attacker-controlled input to be reflected in a web pag...

CVE-2025-23576

CVE-2025-23576 relates to a Reflected XSS in the WordPress WP Intro.JS plugin (versions

CVE-2025-23570 WordPress WP Social Links plugin <= 0.3.1 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Mitchell Bundy WP Social Links wp-social-links allows Reflected XSS.This issue affects WP Social Links: from n/a through = 0.3.1...

CVE-2025-23570

CVE-2025-23570 is a Reflected XSS in the WordPress WP Social Links plugin (

CVE-2025-23538

The CVE refers to a reflected Cross-Site Scripting (XSS) vulnerability in the WordPress WP Contest plugin, affecting versions up to 1.0.0. The root cause is improper neutralization of input during web page generation, enabling reflected XSS. Connected sources consistently describe the issue and l...

CVE-2025-23496

CVE-2025-23496 describes a Reflected Cross-Site Scripting (XSS) vulnerability in the WordPress WP FPO plugin (and NotFound WP FPO) with improper input neutralization during web page generation. Affected: WP FPO plugin versions up to 1.0 (and NotFound WP FPO up to 1.0). Documented by multiple sour...

WordPress plugin NotFound WP SpaceContent 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site request forgery vulnerability...