CVE-2025-39558

CVE-2025-39558 is a Reflected Cross-Site Scripting (XSS) vulnerability in the WordPress plugin CRM Perks (versions up to 1.1.7). Affected software is CRM Perks – WordPress HelpDesk Integration. The issue arises from improper input neutralization during web page generation, enabling reflected XSS....

CVE-2025-22651 WordPress Stylish Google Sheet Reader plugin <= 4.0 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in wppluginboxdev Stylish Google Sheet Reader stylish-google-sheet-reader allows Reflected XSS.This issue affects Stylish Google Sheet Reader: from n/a through = 4.0...

CVE-2025-22636 WordPress VR-Frases plugin <= 4.0.1 - Reflected XSS to SQL Injection vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Vicente Ruiz Gálvez VR-Frases vr-frases allows Reflected XSS.This issue affects VR-Frases: from n/a through = 4.0.1...

CVE-2025-22636

CVE-2025-22636 — WordPress VR-Frases plugin is a Reflected XSS vulnerability arising from improper neutralization of input during web page generation in VR-Frases (WordPress plugin). Affected: VR-Frases versions up to 3.0.1 (per CVE). Exploitation entails injecting malicious scripts via inputs re...

CVE-2025-22636 WordPress VR-Frases plugin <= 3.0.1 - Reflected XSS to SQL Injection vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Vicente Ruiz Gálvez VR-Frases allows Reflected XSS. This issue affects VR-Frases: from n/a through 3.0.1...

CVE-2025-22692 WordPress Sponsered Link plugin <= 4.0 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in rachanaS Sponsered Link sponsered-link allows Reflected XSS.This issue affects Sponsered Link: from n/a through = 4.0...

CVE-2025-22774 WordPress CRUDLab Scroll to Top Plugin <= 1.0.1 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in CRUDLab CRUDLab Scroll to Top crudlab-scroll-to-top allows Reflected XSS.This issue affects CRUDLab Scroll to Top: from n/a through = 1.0.1...

CVE-2025-22774 WordPress CRUDLab Scroll to Top Plugin <= 1.0.1 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in CRUDLab CRUDLab Scroll to Top crudlab-scroll-to-top allows Reflected XSS.This issue affects CRUDLab Scroll to Top: from n/a through = 1.0.1...

CVE-2025-22796

The CVE-2025-22796 entry concerns the WordPress WP-Asambleas plugin (versions up to and including 2.85.0). The vulnerability is an Improper Neutralization of Input During Web Page Generation, i.e., a Reflected Cross-Site Scripting (XSS) flaw in WP-Asambleas. The root cause is unneutralized user i...

CVE-2025-22796 WordPress WP-Asambleas Plugin <= 2.85.0 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in platcom WP-Asambleas wp-asambleas allows Reflected XSS.This issue affects WP-Asambleas: from n/a through = 2.85.0...

CVE-2025-31011

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in ReichertBrothers SimplyRETS Real Estate IDX simply-rets allows Reflected XSS.This issue affects SimplyRETS Real Estate IDX: from n/a through = 3.2.2...

CVE-2025-26743

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in TC.K Advance WP Query Search Filter advance-wp-query-search-filter allows Reflected XSS.This issue affects Advance WP Query Search Filter: from n/a through = 1.0.10...

CVE-2025-26954

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in 1pluginjquery ZooEffect 1-jquery-photo-gallery-slideshow-flash allows Reflected XSS.This issue affects ZooEffect: from n/a through = 1.11...

CVE-2025-26992

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in fatcatapps Landing Page Cat landing-page-cat allows Reflected XSS.This issue affects Landing Page Cat: from n/a through = 1.7.8...

PT-2025-17113 · Unknown · Raptive Ads

Name of the Vulnerable Software and Affected Versions: Raptive Ads versions 3.7.3 and earlier Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, allowing Reflected XSS. This enables potential attackers to inject...

PT-2025-17032 · Woocommerce · Akadrama Shipping With Venipak For Woocommerce

Name of the Vulnerable Software and Affected Versions: Akadrama Shipping with Venipak for WooCommerce versions 1.22.3 and earlier Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, allowing Reflected XSS...

PT-2025-17029 · Unknown · Debounce Email Validator

Name of the Vulnerable Software and Affected Versions: DeBounce Email Validator versions n/a through 5.6.5 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, which allows Reflected XSS. This means that an attacker...

PT-2025-17014 · Unknown · Ip2Location Variables

Name of the Vulnerable Software and Affected Versions: IP2Location Variables versions n/a through 2.9.5 Description: The issue is a Cross-Site Request Forgery CSRF vulnerability that allows Reflected XSS. Recommendations: For versions n/a through 2.9.5, update to a version later than 2.9.5 to...

PT-2025-17181 · Crm Perks · Crm Perks

Name of the Vulnerable Software and Affected Versions: CRM Perks versions 1.1.7 and earlier Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting. Specifically, it is a Reflected XSS vulnerability, which means that an...

PT-2025-17170 · Unknown · Rtpharry Bulk Page Stub Creator

Name of the Vulnerable Software and Affected Versions: rtpHarry Bulk Page Stub Creator versions n/a through 1.1 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as 'Cross-site Scripting', which allows Reflected XSS. This means an attacke...