Lucene search
+L

45214 matches found

CVE
CVE
•added 2026/01/08 9:17 a.m.•61 views

CVE-2025-68887

CVE-2025-68887 refers to a Reflected XSS in the WP-BusinessDirectory (WordPress) plugin. The Wordfence Vulnerability Report lists WP-BusinessDirectory

7.1CVSS5.8AI score0.00216EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2026/01/08 9:17 a.m.•51 views

CVE-2025-68889 WordPress Pinpoll plugin <= 4.0.0 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Pinpoll Pinpoll pinpoll allows Reflected XSS.This issue affects Pinpoll: from n/a through = 4.0.0...

7.1CVSS0.00216EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2026/01/08 9:17 a.m.•51 views

CVE-2025-68887 WordPress WP-BusinessDirectory plugin <= 4.0.1 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in CMSJunkie - WordPress Business Directory Plugins WP-BusinessDirectory wp-businessdirectory allows Reflected XSS.This issue affects WP-BusinessDirectory: from n/a through = 4.0.1...

7.1CVSS0.00216EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2026/01/08 9:17 a.m.•9 views

CVE-2025-68889 WordPress Pinpoll plugin <= 4.0.0 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Pinpoll Pinpoll pinpoll allows Reflected XSS.This issue affects Pinpoll: from n/a through = 4.0.0...

7.1CVSS5.8AI score0.00216EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2026/01/08 9:17 a.m.•8 views

CVE-2025-68887 WordPress WP-BusinessDirectory plugin <= 4.0.1 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in CMSJunkie - WordPress Business Directory Plugins WP-BusinessDirectory wp-businessdirectory allows Reflected XSS.This issue affects WP-BusinessDirectory: from n/a through = 4.0.1...

7.1CVSS5.8AI score0.00216EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2026/01/08 9:17 a.m.•7 views

CVE-2025-68874 WordPress Visitor Stats Widget plugin <= 1.5.0 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Shahjada Visitor Stats Widget visitor-stats-widget allows Reflected XSS.This issue affects Visitor Stats Widget: from n/a through = 1.5.0...

5.8AI score0.00178EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2026/01/08 9:17 a.m.•53 views

CVE-2025-68874 WordPress Visitor Stats Widget plugin <= 1.5.0 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Shahjada Visitor Stats Widget visitor-stats-widget allows Reflected XSS.This issue affects Visitor Stats Widget: from n/a through = 1.5.0...

7.1CVSS0.00178EPSS
SaveExploits0References1
CVE
CVE
•added 2026/01/08 9:17 a.m.•32 views

CVE-2025-68874

CVE-2025-68874 is a real, publicly listed vulnerability affecting the WordPress plugin “Visitor Stats Widget.” The connected document confirms: an unauthenticated, reflected cross-site scripting (XSS) flaw due to improper neutralization of input during web page generation in the Visitor Stats Wid...

7.1CVSS5.8AI score0.00178EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2026/01/08 9:17 a.m.•46 views

CVE-2025-68873 WordPress PRIMER by chloédigital plugin <= 1.0.25 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in chloédigital PRIMER by chloédigital primer-by-chloedigital allows Reflected XSS.This issue affects PRIMER by chloédigital: from n/a through = 1.0.25...

7.1CVSS0.00178EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2026/01/08 9:17 a.m.•8 views

CVE-2025-67932 WordPress Listeo Core plugin < 2.0.19 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in purethemes Listeo Core listeo-core allows Reflected XSS.This issue affects Listeo Core: from n/a through 2.0.19...

7.1CVSS5.8AI score0.00178EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2026/01/08 9:17 a.m.•60 views

CVE-2025-67933 WordPress Taskbuilder plugin <= 4.0.9 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in taskbuilder Taskbuilder taskbuilder allows Reflected XSS.This issue affects Taskbuilder: from n/a through = 4.0.9...

7.1CVSS0.00178EPSS
SaveExploits0References1
CVE
CVE
•added 2026/01/08 9:17 a.m.•36 views

CVE-2025-67933

CVE-2025-67933 is a Reflected Cross-Site Scripting issue in Taskbuilder – WordPress Project Management (Taskbuilder) with a root cause of improper input neutralization during web page generation. Affected range is Taskbuilder: from n/a through

7.1CVSS5.8AI score0.00178EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2026/01/08 9:17 a.m.•8 views

CVE-2025-67933 WordPress Taskbuilder plugin <= 4.0.9 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in taskbuilder Taskbuilder taskbuilder allows Reflected XSS.This issue affects Taskbuilder: from n/a through = 4.0.9...

7.1CVSS5.8AI score0.00178EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2026/01/08 9:17 a.m.•56 views

CVE-2025-67930 WordPress eHive Search plugin <= 2.5.0 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Vernon Systems Limited eHive Search ehive-search allows Reflected XSS.This issue affects eHive Search: from n/a through = 2.5.0...

7.1CVSS0.00219EPSS
SaveExploits0References1
CVE
CVE
•added 2026/01/08 9:17 a.m.•56 views

CVE-2025-67927

CVE-2025-67927 involves Link Whisper Free (WordPress plugin) and is a Reflected XSS due to improper input neutralization during web page generation. Affected versions are Free: up to 0.8.8 (per initial record); Wordfence notes the issue exists and has been patched. Impact could include sneakily i...

7.1CVSS5.8AI score0.00219EPSS
SaveExploits0References1
CVE
CVE
•added 2026/01/08 9:17 a.m.•52 views

CVE-2025-67930

CVE-2025-67930 : Reflected Cross-Site Scripting in the WordPress plugin eHive Search (formerly ehive-search) for versions

7.1CVSS5.8AI score0.00219EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2026/01/08 9:17 a.m.•54 views

CVE-2025-67922 WordPress Grand Restaurant theme < 7.0.9 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in ThemeGoods Grand Restaurant grandrestaurant allows Reflected XSS.This issue affects Grand Restaurant: from n/a through 7.0.9...

7.1CVSS0.00219EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2026/01/08 9:17 a.m.•15 views

CVE-2025-67922 WordPress Grand Restaurant theme < 7.0.9 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in ThemeGoods Grand Restaurant grandrestaurant allows Reflected XSS.This issue affects Grand Restaurant: from n/a through 7.0.9...

7.1CVSS5.8AI score0.00219EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2026/01/08 9:17 a.m.•70 views

CVE-2025-67916 WordPress Jobify theme <= 4.3.0 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Astoundify Jobify jobify allows Reflected XSS.This issue affects Jobify: from n/a through = 4.3.0...

7.1CVSS0.00219EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2026/01/08 9:17 a.m.•9 views

CVE-2025-67918 WordPress Woffice theme <= 5.4.30 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in WofficeIO Woffice woffice allows Reflected XSS.This issue affects Woffice: from n/a through = 5.4.30...

7.1CVSS5.8AI score0.00219EPSS
SaveExploits0References1
Rows per page
Query Builder