16444 matches found
CVE-2025-27267 WordPress Random Quotes Plugin <= 1.3 - Reflected Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in srcoley Random Quotes random-quotes allows Reflected XSS.This issue affects Random Quotes: from n/a through = 1.3...
CVE-2025-28855 WordPress Teleport plugin <= 1.2.4 - Reflected Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in srcoley Teleport teleport allows Reflected XSS.This issue affects Teleport: from n/a through = 1.2.4...
CVE-2025-26584
CVE-2025-26584 : WordPress TBTestimonials plugin versions up to 1.7.3 are vulnerable to Reflected XSS due to improper input neutralization during web page generation. Impact is reflected cross-site scripting; no exploitation details are provided in the sources, and the available documents do not ...
CVE-2025-26575 WordPress Display Post Meta plugin <= 1.5- Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Kyle Maurer Display Post Meta allows Reflected XSS. This issue affects Display Post Meta: from n/a through 2.4.4...
CVE-2025-26575 WordPress Display Post Meta plugin <= 1.5- Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Kyle Maurer Display Post Meta display-post-meta allows Reflected XSS.This issue affects Display Post Meta: from n/a through = 2.4.4...
CVE-2025-26576 WordPress WP Simple Slideshow Plugin <= 1.0 - Reflected Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in takumin WP Simple Slideshow wp-simple-slideshow allows Reflected XSS.This issue affects WP Simple Slideshow: from n/a through = 1.0...
CVE-2025-26583
CVE-2025-26583 is a Reflected XSS in the WordPress Video Share VOD plugin. The vulnerability arises from improper input neutralization during web page generation, affecting Video Share VOD versions from n/a up to and including 2.7.9. The connected documents confirm the issue and its CVSS-derived ...
CVE-2025-26575
CVE-2025-26575 is a reflected cross-site scripting (XSS) vulnerability in the WordPress plugin Display Post Meta . The issue arises from improper input neutralization during web page generation and affects plugin versions from n/a through 2.4.4 . The CVSS 3.1 vector indicates a Network attack vec...
CVE-2025-26579 WordPress MicroPayments Paid Membership plugin <= 3.1.6 - Reflected Cross-Site Scripting vulnerability
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in videowhisper MicroPayments allows Reflected XSS. This issue affects MicroPayments: from n/a through 3.1.6...
CVE-2025-26583 WordPress Video Share VOD plugin <= 2.7.2 - Reflected Cross-Site Scripting vulnerability
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in videowhisper Video Share VOD allows Reflected XSS. This issue affects Video Share VOD: from n/a through 2.7.2...
CVE-2025-26576 WordPress WP Simple Slideshow Plugin <= 1.0 - Reflected Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in takumin WP Simple Slideshow allows Reflected XSS. This issue affects WP Simple Slideshow: from n/a through 1.0...
CVE-2025-26581
CVE-2025-26581 affects WordPress Picture Gallery (plugin) vulnerable through improper input handling in web page generation, enabling Cross-site Scripting (XSS). The NVD entry describes a Reflected XSS outcome with CVSS 3.1 base score 7.1 (HIGH) and network access with user interaction required. ...
CVE-2025-26579
CVE-2025-26579 affects WordPress MicroPayments plugin (WordPress) with a Reflected XSS due to improper input neutralization during page generation. Impact is Reflected Cross‑Site Scripting in MicroPayments from versions n/a through 3.1.6. The issue is publicly documented; Patchstack notes a fix i...
CVE-2025-26576
CVE-2025-26576 : Reflected XSS in the WordPress plugin WP Simple Slideshow (affected:
CVE-2025-26573 WordPress Rizzi Guestbook plugin <= 4.0.1 - Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in JamRizzi Technologies Rizzi Guestbook rizzi-guestbook allows Reflected XSS.This issue affects Rizzi Guestbook: from n/a through = 4.0.1...
CVE-2025-26564
CVE-2025-26564 affects the WordPress GNUCommerce plugin (versions
CVE-2025-26573 WordPress Rizzi Guestbook plugin <= 4.0.1 - Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in NotFound Rizzi Guestbook allows Reflected XSS. This issue affects Rizzi Guestbook: from n/a through 4.0.1...
CVE-2025-26565
CVE-2025-26565 affects GNUPress WordPress Plugin, versions up to 0.2.9. It is a Reflected Cross‑Site Scripting (XSS) vulnerability arising from improper neutralization of input during web page generation. CVSS v3.1 base score is 7.1 (HIGH) with network attack vector, no privileges required, user ...
CVE-2025-26566
CVE-2025-26566 – NotFound In Stock Mailer for WooCommerce is a Reflected Cross-Site Scripting (XSS) vulnerability in the WordPress plugin In Stock Mailer for WooCommerce, affecting versions up to 2.1.1. The issue arises from improper input neutralization during web page generation, enabling refle...