CVE-2025-46515 WordPress Category Widget plugin <= 2.0.2 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in M A Vinoth Kumar Category Widget allows Reflected XSS. This issue affects Category Widget: from n/a through 2.0.2...

CVE-2025-46515

CVE-2025-46515 concerns WordPress Widget “Category Widget.” The vulnerability is a Reflected XSS caused by improper input neutralization during web page generation in Category Widget versions n/a through 2.0.2. Multiple connected sources confirm the category widget is affected up to 2.0.2 and tha...

CVE-2025-46526 WordPress My Custom Widgets plugin <= 2.0.5 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in janekniefeldt My Custom Widgets mycustomwidget allows Reflected XSS.This issue affects My Custom Widgets: from n/a through = 2.0.5...

CVE-2025-46526

CVE-2025-46526: WordPress plugin My Custom Widgets (

CVE-2025-46537 WordPress Section Widget plugin <= 3.3.1 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in ctltwp Section Widget section-widget allows Reflected XSS.This issue affects Section Widget: from n/a through = 3.3.1...

CVE-2025-46537

CVE-2025-46537 is a WordPress Section Widget vulnerability (ctltwp Section Widget) that allows a Reflected XSS due to improper input neutralization during web page generation. Affected versions are listed as n/a through 3.3.1. The issue is corroborated in multiple sources (NVD/Red Hat/CVE records...

CVE-2025-46537 WordPress Section Widget plugin <= 3.3.1 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in ctltwp Section Widget allows Reflected XSS. This issue affects Section Widget: from n/a through 3.3.1...

CVE-2025-47458 WordPress B2i Investor Tools plugin <= 1.0.7.9 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in B2itech B2i Investor Tools allows Reflected XSS. This issue affects B2i Investor Tools: from n/a through 1.0.7.9...

CVE-2025-47458 WordPress B2i Investor Tools plugin <= 1.0.7.9 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in B2itech B2i Investor Tools b2i-investor-tools allows Reflected XSS.This issue affects B2i Investor Tools: from n/a through = 1.0.7.9...

CVE-2025-47458

CVE-2025-47458 refers to a reflected Cross-Site Scripting (XSS) vulnerability in the WordPress plugin B2i Investor Tools . The issue arises from improper input neutralization during web page generation and affects the plugin in versions up to and including 1.0.7.9 . Connected sources corroborate ...

CVE-2025-47611

CVE-2025-47611 reflects a Reflected Cross-Site Scripting (XSS) flaw in the WordPress plugin User Meta (versions n/a through 3.1.2). Root cause: improper input neutralization during web page generation. Impact (per metrics): confidentiality, integrity, and availability are Low to Low, with user in...

CVE-2025-47613

CVE-2025-47613 concerns the WordPress plugin “School Management”. The connected sources validate a Reflected Cross-Site Scripting (XSS) vulnerability caused by improper input neutralization during web page generation. The issue affects the WordPress School Management plugin up to version 92.0.0. ...

CVE-2025-47618

CVE-2025-47618 applies to WordPress BMI Adult & Kid Calculator plugin (versions 1.2.2 and earlier). The issue is a Reflected XSS vulnerability caused by improper input neutralization during web page generation. It is listed with CVSS v3.1 base score 7.1 (HIGH), with network attack vector, no priv...

CVE-2025-47618 WordPress BMI Adult & Kid Calculator plugin <= 1.2.2 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Mortgage Calculator BMI Adult & Kid Calculator bmi-adultkid-calculator allows Reflected XSS.This issue affects BMI Adult & Kid Calculator: from n/a through = 1.2.2...

CVE-2025-47613 WordPress School Management System for Wordpress plugin <= 92.0.0 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in mojoomla School Management allows Reflected XSS. This issue affects School Management: from n/a through 92.0.0...

CVE-2025-47673

CVE-2025-47673 affects the WordPress Arconix Shortcodes plugin up to version 2.1.16. It is a Reflected XSS flaw caused by improper input neutralization during web page generation. According to CVSS 3.1, the base score is 7.1 (High); vector: Network, low attack complexity, privileges required: Non...

CVE-2025-47678

CVE-2025-47678 affects the WordPress FunnelCockpit plugin. According to the records, FunnelCockpit versions up to 1.4.2 are vulnerable to Reflected Cross-Site Scripting caused by improper input neutralization during web page generation. The CVE entry itself does not specify a patch or mitigation....

CVE-2025-47680 WordPress xili-tidy-tags plugin <= 1.12.06 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Michel - xiligroup dev xili-tidy-tags xili-tidy-tags allows Reflected XSS.This issue affects xili-tidy-tags: from n/a through = 1.12.06...

CVE-2025-47678 WordPress FunnelCockpit plugin <= 1.4.3 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in FunnelCockpit FunnelCockpit funnelcockpit allows Reflected XSS.This issue affects FunnelCockpit: from n/a through = 1.4.3...

CVE-2025-47678 WordPress FunnelCockpit plugin <= 1.4.3 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in FunnelCockpit FunnelCockpit funnelcockpit allows Reflected XSS.This issue affects FunnelCockpit: from n/a through = 1.4.3...