16444 matches found
CVE-2025-28921 WordPress SpatialMatch IDX plugin <= 3.0.9 - Reflected Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in homejunction SpatialMatch IDX spatialmatch-free-lifestyle-search allows Reflected XSS.This issue affects SpatialMatch IDX: from n/a through = 3.0.9...
CVE-2025-28921
CVE-2025-28921 is a Reflected Cross-Site Scripting (XSS) vulnerability in the WordPress plugin SpatialMatch IDX (NotFound SpatialMatch IDX). Affected versions are up to 3.0.9. The CVE description notes improper neutralization of input during web page generation, enabling reflected XSS. The associ...
CVE-2025-28899
CVE-2025-28899 is a Reflected Cross-Site Scripting issue in the WordPress plugin WP Event Ticketing , affecting versions from public listing “n/a through 1.3.4.” The vulnerability results from improper input neutralization during web page generation, enabling a reflected script when a user visits...
CVE-2025-28911
CVE-2025-28911 (Gravity 2 PDF) Vulnerability type: Reflected Cross-Site Scripting (XSS) due to improper input neutralization during web page generation in Gravity 2 PDF plugin for WordPress. Affected: Gravity 2 PDF versions from n/a up to 3.1.3. Impact and context: CVSS 3.1 base score is 7.1 (HIG...
CVE-2025-28889
CVE-2025-28889 is a reflected Cross-Site Scripting in the WordPress plugin “Custom Product Stickers for Woocommerce.” The connected Wordfence vulnerability listing specifies: affected software is Custom Product Stickers for Woocommerce (up to 1.9.0); vulnerability type: Reflected XSS; CVSS v3.1 b...
CVE-2025-28889 WordPress Custom Product Stickers for Woocommerce plugin <= 1.9.0 - Reflected Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in starblank Custom Product Stickers for Woocommerce custom-product-stickers-for-woocommerce allows Reflected XSS.This issue affects Custom Product Stickers for Woocommerce: from n/a through = 1.9.0...
CVE-2025-28890 WordPress Lightview Plus plugin <= 3.1.3 - Reflected Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in puzich Lightview Plus lightview-plus allows Reflected XSS.This issue affects Lightview Plus: from n/a through = 3.1.3...
CVE-2025-28880
CVE-2025-28880 : Reflected XSS in Blue Captcha for WordPress (affected from n/a to 1.7.4). Root cause: improper input neutralization during web page generation. Impact: cross-site scripting possible; exploitation details not provided in initial doc. Public data indicates no published patch in the...
CVE-2025-28877
CVE-2025-28877 is a Reflected XSS in the Key4ce osTicket Bridge. The description states affected Software: Key4ce osTicket Bridge, versions from n/a through 1.4.0. The connected data confirms the issue as a reflected cross-site scripting vulnerability, but does not provide specific exploit detail...
CVE-2025-28882
CVE-2025-28882 : Connected documents confirm a Reflected Cross-Site Scripting in Omnify (WordPress) affecting Omnify
CVE-2025-28880 WordPress Blue Captcha plugin <= 1.7.4 - Reflected Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in jotis Blue Captcha blue-captcha allows Reflected XSS.This issue affects Blue Captcha: from n/a through = 1.7.4...
CVE-2025-28858 WordPress Arrow Maps plugin <= 1.0.9 - Reflected Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Arrow Plugins Arrow Maps ap-google-maps allows Reflected XSS.This issue affects Arrow Maps: from n/a through = 1.0.9...
CVE-2025-27267 WordPress Random Quotes Plugin <= 1.3 - Reflected Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in srcoley Random Quotes random-quotes allows Reflected XSS.This issue affects Random Quotes: from n/a through = 1.3...
CVE-2025-26584 WordPress TBTestimonials Plugin <= 1.7.3 - Reflected Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in NotFound TBTestimonials allows Reflected XSS. This issue affects TBTestimonials: from n/a through 1.7.3...
CVE-2025-28869
NextGEN Gallery Voting has a Reflected XSS vulnerability (CVE-2025-28869) that affects NextGEN Gallery Voting: from n/a through 2.7.6. The description specifies improper neutralization of input during web page generation as the root cause. The connected documents do not provide technical details ...
CVE-2025-26584 WordPress TBTestimonials Plugin <= 1.7.3 - Reflected Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Travis Ballard TBTestimonials tb-testimonials allows Reflected XSS.This issue affects TBTestimonials: from n/a through = 1.7.3...
CVE-2025-28855
CVE-2025-28855 – Teleport (WordPress plugin) : Reflected XSS due to improper input neutralization in web page generation. Affected: Teleport up to version 1.2.4. Connected sources confirm the issue (CVE entry) and list Teleport as vulnerable to Reflected Cross-Site Scripting; no explicit fix/vers...
CVE-2025-27267
CVE-2025-27267 concerns WordPress plugin Random Quotes (versions
CVE-2025-28865
CVE-2025-28865 affects WP Colorful Tag Cloud (WordPress plugin) up to version 2.0.1, with a Reflected XSS due to improper input neutralization during web page generation. CVSSv3.1 base score 7.1 (HIGH). The connected documents confirm the XSS vector but do not provide a confirmed fix version or p...
CVE-2025-28858
Arrow Maps (WordPress plugin Arrow Maps) is affected by CVE-2025-28858: Reflected XSS due to improper neutralization of input during web page generation. Affected versions are described as 'n/a through <= 1.0.9'. The CVSS 3.1 base score is 7.1 (High) with network attack vector, low to low for ...