CVE-2025-54044

CVE-2025-54044 is a reflected XSS vulnerability in WordPress Elite Video Player

CVE-2025-54044 WordPress Elite Video Player <= 10.0.5 - Cross Site Scripting (XSS) Vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in CreativeMedia Elite Video Player elite-video-player allows Reflected XSS.This issue affects Elite Video Player: from n/a through = 10.0.5...

CVE-2025-54055 WordPress Druco <= 1.5.2 - Cross Site Scripting (XSS) Vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in skygroup Druco druco allows Reflected XSS.This issue affects Druco: from n/a through = 1.5.2...

CVE-2025-54056 WordPress Responsive HTML5 Audio Player PRO With Playlist <= 3.5.8 - Cross Site Scripting (XSS) Vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in LambertGroup Responsive HTML5 Audio Player PRO With Playlist lbg-audio2-html5 allows Reflected XSS.This issue affects Responsive HTML5 Audio Player PRO With Playlist: from n/a through = 3.5.8...

CVE-2025-54670 WordPress oik Plugin <= 4.15.2 - Cross Site Scripting (XSS) Vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in bobbingwide oik allows Reflected XSS. This issue affects oik: from n/a through 4.15.2...

CVE-2025-57701

DIAEnergie - Reflected Cross-site Scripting...

CVE-2025-57702

DIAEnergie - Reflected Cross-site Scripting...

CVE-2025-57703

DIAEnergie - Reflected Cross-site Scripting...

PT-2025-34011 · Unknown · Elite Video Player

Name of the Vulnerable Software and Affected Versions: Elite Video Player versions through 10.0.5 Description: The software contains an Improper Neutralization of Input During Web Page Generation issue, which allows for Reflected Cross-site Scripting XSS. Recommendations: Update Elite Video Playe...

WordPress plugin WP Pipes 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security...

WordPress plugin Comments Capcha Box 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation. WordPress is a blogging platform developed in the PHP language. The platform supports personal blog sites on servers running PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability exists in...

PT-2025-33969 · Nootheme · Jobmonster

Name of the Vulnerable Software and Affected Versions: NooTheme Jobmonster versions through 4.7.8 Description: An Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' issue exists in NooTheme Jobmonster, allowing Reflected XSS. Recommendations: At the moment, there i...

PT-2025-33924 · Lambertgroup · Lambertgroup Apollo

Name of the Vulnerable Software and Affected Versions: LambertGroup Apollo - Sticky Full Width HTML5 Audio Player versions through 3.4 Description: This issue involves improper neutralization of input during web page generation, leading to a reflected cross-site scripting XSS condition...

PT-2025-33921 · Lambertgroup · Lambertgroup Shout - Html5 Radio Player With Ads - Shoutcast/Icecast Support

Name of the Vulnerable Software and Affected Versions: LambertGroup SHOUT - HTML5 Radio Player With Ads - ShoutCast and IceCast Support versions through 3.5.4 Description: The software contains an Improper Neutralization of Input During Web Page Generation issue, leading to a Reflected Cross-site...

PT-2025-33915 · WordPress · Multimedia Playlist Slider Addon For Wpbakery Page Builder

Name of the Vulnerable Software and Affected Versions: Multimedia Playlist Slider Addon for WPBakery Page Builder versions through 2.1 Description: The software contains an Improper Neutralization of Input During Web Page Generation issue, leading to Reflected Cross-site Scripting XSS...

WordPress plugin Youtube Vimeo Video Player and Slider 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...

PT-2025-33980 · WordPress · Lambertgroup Universal Video Player - Addon For Wpbakery Page Builder

Name of the Vulnerable Software and Affected Versions: LambertGroup Universal Video Player - Addon for WPBakery Page Builder versions through 3.2.1 Description: The software contains an Improper Neutralization of Input During Web Page Generation issue, leading to a Reflected Cross-site Scripting...

WordPress plugin Apollo - Sticky Full Width HTML5 Audio Player Cross-Site Scripting Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A security vulnerability exists in WordPres...

PT-2025-33984 · Unknown · Lambertgroup Youtube Vimeo Video Player/Slider

Name of the Vulnerable Software and Affected Versions: LambertGroup Youtube Vimeo Video Player and Slider versions n/a through 3.8 Description: The software contains an improper neutralization of input during web page generation, leading to a reflected cross-site scripting XSS issue...

PT-2025-33979 · Unknown · Raptive Ads

Name of the Vulnerable Software and Affected Versions: Raptive Ads versions through 3.8.0 Description: Raptive Ads is susceptible to a reflected cross-site scripting XSS issue due to improper neutralization of input during web page generation. Recommendations: Update Raptive Ads to a version late...