16232 matches found
CVE-2025-46487
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in sftranna EC Authorize.net ec-authorizenet allows Reflected XSS.This issue affects EC Authorize.net: from n/a through = 0.3.3...
CVE-2025-46456
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Jason Theme Blvd Sliders theme-blvd-sliders allows Reflected XSS.This issue affects Theme Blvd Sliders: from n/a through = 1.2.5...
CVE-2025-46437
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in tayoricom Tayori Form tayori allows Reflected XSS.This issue affects Tayori Form: from n/a through = 1.2.9...
CVE-2025-46440
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Mark kStats Reloaded kstats-reloaded allows Reflected XSS.This issue affects kStats Reloaded: from n/a through = 0.7.4...
CVE-2025-39505
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in GoodLayers Goodlayers Hotel gdlr-hotel allows Reflected XSS.This issue affects Goodlayers Hotel: from n/a through = 3.1.4...
CVE-2025-39502
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in GoodLayers Goodlayers Hostel gdlr-hostel allows Reflected XSS.This issue affects Goodlayers Hostel: from n/a through = 3.1.2...
CVE-2025-31636
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in SaurabhSharma WP Post Modules for Elementor wp-post-modules-el allows Reflected XSS.This issue affects WP Post Modules for Elementor: from n/a through = 2.5.0...
Exploit for CVE-2025-0133
CVE-2025-0133 Reflected XSS Detection Tool Author: Derek...
CVE-2025-32285
CVE-2025-32285: WordPress Butcher theme (Butcher) vulnerability up to version 2.40 enabling Reflected XSS due to improper input neutralization during web page generation. Public details confirm affected software and vulnerability class; no exploitation status is provided in the documents. Patch i...
CVE-2025-39502 WordPress Goodlayers Hostel Plugin <= 3.1.2 - Reflected Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in GoodLayers Goodlayers Hostel allows Reflected XSS. This issue affects Goodlayers Hostel: from n/a through 3.1.2...
CVE-2025-46437
CVE-2025-46437 – Reflected Cross-Site Scripting in the WordPress Tayori Form plugin (versions
CVE-2025-46437 WordPress Tayori Form plugin <= 1.2.9 - Reflected Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in tayoricom Tayori Form tayori allows Reflected XSS.This issue affects Tayori Form: from n/a through = 1.2.9...
CVE-2025-46448
CVE-2025-46448 is a Reflected XSS affecting the WordPress Document Management System plugin (versions up to 1.24). The vulnerability arises from improper input neutralization during web page generation, enabling a reflected script when user-supplied input is processed by the DMS plugin. Connected...
CVE-2025-46456 WordPress Theme Blvd Sliders plugin <= 1.2.5 - Reflected Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Jason Theme Blvd Sliders allows Reflected XSS. This issue affects Theme Blvd Sliders: from n/a through 1.2.5...
CVE-2025-46456
CVE-2025-46456 affects WordPress Theme Blvd Sliders plugin versions up to 1.2.5. The issue is a Reflected Cross-Site Scripting (XSS) vulnerability caused by improper input neutralization during web page generation. The CVSS vector in the initial record indicates a public impact with high likeliho...
CVE-2025-46487
CVE-2025-46487 is a Reflected Cross‑Site Scripting (XSS) vulnerability in the WordPress plugin EC Authorize.net . The affected range is shown as “n/a through 0.3.3” (i.e., versions up to and including 0.3.3). The root cause, per the description, is improper neutralization of input during web page...
CVE-2025-46488
CVE-2025-46488 concerns WordPress Visual Builder plugin (
CVE-2025-46487 WordPress EC Authorize.net plugin <= 0.3.3 - Reflected Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in sftranna EC Authorize.net allows Reflected XSS. This issue affects EC Authorize.net: from n/a through 0.3.3...
CVE-2025-46487 WordPress EC Authorize.net plugin <= 0.3.3 - Reflected Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in sftranna EC Authorize.net ec-authorizenet allows Reflected XSS.This issue affects EC Authorize.net: from n/a through = 0.3.3...
CVE-2025-46488 WordPress Visual Builder plugin <= 1.2.2 - Broken Access Control vulnerability
Missing Authorization vulnerability in dastan800 Visual Builder visual-builder allows Reflected XSS.This issue affects Visual Builder: from n/a through = 1.2.2...