CVE-2025-23633 WordPress WP Database Audit plugin <= 1.0 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in khanhtruong WP Database Audit database-audit allows Reflected XSS.This issue affects WP Database Audit: from n/a through = 1.0...

CVE-2025-23704

CVE-2025-23704 is a reflected XSS in the WordPress plugin Your Lightbox (versions up to 1.0). The issue stems from improper input neutralization during web page generation and affects Your Lightbox: from n/a through 1.0. Affected product: Your Lightbox. Root cause and affected scope are stated in...

CVE-2025-23638

CVE-2025-23638 is a Reflected Cross-Site Scripting (XSS) vulnerability in the WordPress plugin Frontend Post Submission (notFound frontend post submission), affecting versions from n/a up to and including 1.0. It is a NotFound variant noted in initial records and is classified as High severity (C...

CVE-2025-23638 WordPress Frontend Post Submission plugin <= 1.0 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Umesh Ghimire Frontend Post Submission frontend-post-submission allows Reflected XSS.This issue affects Frontend Post Submission: from n/a through = 1.0...

CVE-2025-23633

CVE-2025-23633 affects the WordPress plugin WP Database Audit (versions

CVE-2025-23680

CVE-2025-23680 describes a Reflected Cross-Site Scripting vulnerability in the WordPress plugin Narnoo Operator (versions

CVE-2025-23632

CVE-2025-23632 affects the WordPress CG Button plugin (Rhizome Networks) up to version 1.0.5.6. It is a Reflected XSS caused by improper input neutralization during web page generation. Exploitation is possible remotely (network access) and requires user interaction. Current connected sources ind...

CVE-2025-23546 WordPress RDP inGroups+ plugin <= 1.0.6 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Robert D Payne RDP inGroups+ rdp-ingroups allows Reflected XSS.This issue affects RDP inGroups+: from n/a through = 1.0.6...

CVE-2025-23543

CVE-2025-23543 : Reflected Cross-Site Scripting in the WordPress plugin “FOMO Pay Chinese Payment Solution” (NotFound) used with WooCommerce. Affected versions: from n/a through 2.0.4. The root cause is improper input neutralization during web page generation, enabling reflected XSS. Connected Re...

CVE-2025-23612

CVE-2025-23612 : Reflected Cross-Site Scripting in the WordPress plugin Pixobe Cartography (versions

CVE-2025-23546 WordPress RDP inGroups+ plugin <= 1.0.6 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in NotFound RDP inGroups+ allows Reflected XSS. This issue affects RDP inGroups+: from n/a through 1.0.6...

CVE-2025-23546

CVE-2025-23546 describes a Reflected Cross-Site Scripting vulnerability in the WordPress plugin RDP inGroups+ (NotFound RDP inGroups+) affecting versions up to 1.0.6. The issue arises from improper input neutralization during web page generation, enabling reflected XSS. CVSS 3.1 vector shows: AV:...

CVE-2025-23543 WordPress FOMO Pay Chinese Payment Solution plugin <= 2.0.4 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in NotFound FOMO Pay Chinese Payment Solution allows Reflected XSS. This issue affects FOMO Pay Chinese Payment Solution: from n/a through 2.0.4...

CVE-2025-23632 WordPress CG Button plugin <= 1.0.5.6 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Rhizome Networks CG Button content-glass-button allows Reflected XSS.This issue affects CG Button: from n/a through = 1.0.5.6...

CVE-2025-23612 WordPress Pixobe Cartography plugin <= 1.0.1 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Pixobe Pixobe Cartography pixobe-cartography allows Reflected XSS.This issue affects Pixobe Cartography: from n/a through = 1.0.1...

CVE-2025-23542

CVE-2025-23542 is a reflected XSS in the WordPress plugin RDP Linkedin Login (vendor: WordPress plugin, affected: versions up to 1.7.0). The NVD/Red Hat and CVE enrichment confirm the flaw stems from improper input neutralization during web page generation, enabling reflected XSS. CVSSv3.1 base s...

CVE-2025-23543 WordPress FOMO Pay Chinese Payment Solution plugin <= 2.0.4 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in fomopay FOMO Pay Chinese Payment Solution fomo-payment-gateway-for-woocommerce allows Reflected XSS.This issue affects FOMO Pay Chinese Payment Solution: from n/a through = 2.0.4...

CVE-2025-23459

CVE-2025-23459: Reflected Cross-Site Scripting in WordPress NS Simple Intro Loader (NotFound NS Simple Intro Loader)

CVE-2025-23459 WordPress NS Simple Intro Loader plugin <= 2.2.3 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in NsThemes NS Simple Intro Loader ns-simple-intro-loader allows Reflected XSS.This issue affects NS Simple Intro Loader: from n/a through = 2.2.3...

CVE-2025-23466

CVE-2025-23466 concerns the WordPress plugin Site Editor Google Map (Site Editor Google Map) and is a Reflected XSS vulnerability in the web page generation input handling. Affected range: plugin versions from n/a through 1.0.1. The NVD/Red Hat entries describe this as an improper neutralization ...