CVE-2025-31094

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in teastudio.pl WP Posts Carousel wp-posts-carousel allows Stored XSS.This issue affects WP Posts Carousel: from n/a through = 1.3.8...

CVE-2025-31094 WordPress WP Posts Carousel <= 1.3.8 - Cross Site Scripting (XSS) Vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in teastudio.pl WP Posts Carousel allows Stored XSS. This issue affects WP Posts Carousel: from n/a through 1.3.8...

CVE-2025-31094

CVE-2025-31094 affects WP Posts Carousel (WordPress plugin). Affected versions: up to 1.3.8. Type of vulnerability: Stored Cross-Site Scripting due to improper input neutralization during web page generation. Impact: enables attacker to execute scripts in a user’s browser when visiting crafted pa...

CVE-2025-31094 WordPress WP Posts Carousel plugin <= 1.3.8 - Cross Site Scripting (XSS) Vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in teastudio.pl WP Posts Carousel wp-posts-carousel allows Stored XSS.This issue affects WP Posts Carousel: from n/a through = 1.3.8...

CVE-2025-31103

creationtimestamp| type| source ---|---|--- 2025-03-28 08:20:31+00:00| seen| https://bsky.app/profile/andranglin.bsky.social/post/3llgez67qe22e 2025-03-28 08:53:59+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3llggv2r4eo2x 2025-03-29 21:02:04+00:00| seen|...

CVE-2025-22398

creationtimestamp| type| source ---|---|--- 2025-03-28 02:28:14+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/9257 2025-03-28 02:40:20+00:00| seen| https://bsky.app/profile/cyberalerts.bsky.social/post/3llfrywabgk2u 2025-03-28 04:03:38+00:00| seen|...

CVE-2025-2294

creationtimestamp| type| source ---|---|--- 2025-03-28 00:00:06+00:00| published-proof-of-concept| Telegram/IpSkdng-DvuBirFh-8nYsY3OgxKRFdquSrS72XmwTlTwLs 2025-03-28 04:00:06+00:00| published-proof-of-concept| Telegram/-T7fiB1UH9VRuMWqeF5wAirAQ9WEH4yGxP0ggrYXPxHLtk 2025-03-28 04:29:56+00:00|...

PT-2025-13466

Name of the Vulnerable Software and Affected Versions WP Posts Carousel versions 1.3.8 and earlier Description The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, allowing Stored XSS. This enables potential attackers to inject...

WordPress Plugin WP Posts Carousel Cross-site Script Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin ... A cross-site scripting...

CVE-2025-31094: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in teastudio.pl WP Posts Carousel wp-posts-carousel allows Stored XSS.This issue affects WP Posts Carousel: from n/a through = 1.3.8...

CVE-2025-26873

creationtimestamp| type| source ---|---|--- 2025-03-27 22:36:46+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/9236 2025-03-27 22:40:18+00:00| seen| https://bsky.app/profile/cyberalerts.bsky.social/post/3llfelpnq762v 2025-03-28 01:01:20+00:00| seen|...

CVE-2025-29306

creationtimestamp| type| source ---|---|--- 2025-03-27 20:50:25+00:00| seen| https://t.me/cvedetector/21333 2025-04-17 10:18:23+00:00| seen| https://bsky.app/profile/bilaltariq01.bsky.social/post/3lmyuweu2gf24 2025-04-18 13:44:02+00:00| seen|...

CVE-2025-22648

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Plugin Devs Blog, Posts and Category Filter for Elementor blog-posts-and-category-for-elementor allows Stored XSS.This issue affects Blog, Posts and Category Filter for Elementor: from n/a through ...

WordPress WP Posts Carousel plugin <= 1.3.7 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by Peter Thaleikis in WordPress Plugin WP Posts Carousel versions = 1.3.7...

CVE-2025-30920

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in teastudio.pl WP Posts Carousel wp-posts-carousel allows Stored XSS.This issue affects WP Posts Carousel: from n/a through = 1.3.7...

CVE-2025-30920

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in teastudio.pl WP Posts Carousel wp-posts-carousel allows Stored XSS.This issue affects WP Posts Carousel: from n/a through = 1.3.7...

CVE-2025-30920 WordPress WP Posts Carousel plugin <= 1.3.7 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in teastudio.pl WP Posts Carousel wp-posts-carousel allows Stored XSS.This issue affects WP Posts Carousel: from n/a through = 1.3.7...

CVE-2025-30920

CVE-2025-30920 affects the WordPress plugin WP Posts Carousel. A Stored XSS exists due to improper input neutralization during web page generation, impacting the plugin versions up to 1.3.7 (and consistent with subsequent CVE entries indicating a fix in 1.3.8). The vulnerability requires authenti...

PT-2025-13159

Name of the Vulnerable Software and Affected Versions WP Posts Carousel versions 1.3.7 and earlier Description The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting. This allows for Stored XSS attacks. Recommendations For WP Posts...

PT-2025-13233

Name of the Vulnerable Software and Affected Versions Plugin Devs Blog, Posts and Category Filter for Elementor versions n/a through 2.0.1 Description The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting. This allows for Stored XS...