CVE-2025-23670

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in montashov 4 author cheer up donate 4-author-cheer-up-donate allows Reflected XSS.This issue affects 4 author cheer up donate: from n/a through = 1.3...

CVE-2025-23490

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Michael Stursberg Browser-Update-Notify browser-update-notify allows Reflected XSS.This issue affects Browser-Update-Notify: from n/a through = 0.2.1...

CVE-2025-23721

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in cloudvn Mobigate mobigatevn allows Reflected XSS.This issue affects Mobigate: from n/a through = 1.0.3...

CVE-2025-23433

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in jnwry vcOS vcos allows Reflected XSS.This issue affects vcOS: from n/a through = 1.4.0...

CVE-2025-23738

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Padam Shankhadev Ps Ads Pro ps-ads-pro allows Reflected XSS.This issue affects Ps Ads Pro: from n/a through = 1.0.0...

CVE-2025-23585

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in CantonBolo Goo.gl Url Shorter googl-url-shorter allows Reflected XSS.This issue affects Goo.gl Url Shorter: from n/a through = 1.0.1...

CVE-2025-23549

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in agora32 Maniac SEO maniac-seo allows Reflected XSS.This issue affects Maniac SEO: from n/a through = 2.0...

CVE-2025-1869

SQL injection vulnerability have been found in 101news affecting version 1.0 through the "username" parameter in admin/checkavalability.php...

CVE-2025-27270

Missing Authorization vulnerability in enituretechnology Residential Address Detection residential-address-detection allows Privilege Escalation.This issue affects Residential Address Detection: from n/a through = 2.5.4...

CVE-2025-27278

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in David Ghedini AcuGIS Leaflet Maps mapfig-premium-leaflet-map-maker allows Reflected XSS.This issue affects AcuGIS Leaflet Maps: from n/a through = 5.1.1.0...

CVE-2025-27263

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Creativeitem Doctor Appointment Booking doctor-appointment-booking allows SQL Injection.This issue affects Doctor Appointment Booking: from n/a through = 1.0.0...

CVE-2025-27264

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in Creativeitem Doctor Appointment Booking doctor-appointment-booking allows PHP Local File Inclusion.This issue affects Doctor Appointment Booking: from n/a through = 1.0.0...

CVE-2025-27279

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in lynk Flashfader flashfader allows Reflected XSS.This issue affects Flashfader: from n/a through = 1.1.1...

CVE-2025-27275

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in andrewfisher WOO Codice Fiscale woo-codice-fiscale allows Reflected XSS.This issue affects WOO Codice Fiscale: from n/a through = 1.6.3...

CVE-2025-26914

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Bowo Variable Inspector variable-inspector allows Reflected XSS.This issue affects Variable Inspector: from n/a through = 2.6.2...

CVE-2025-26587

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in nghorta sidebarTabs sidebartabs allows Reflected XSS.This issue affects sidebarTabs: from n/a through = 3.1...

CVE-2025-26879

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Cristián Lávaque s2Member s2member allows Reflected XSS.This issue affects s2Member: from n/a through = 241216...

CVE-2025-26885

Deserialization of Untrusted Data vulnerability in Beaver Builder WordPress Assistant assistant allows Object Injection.This issue affects WordPress Assistant: from n/a through = 1.5.1...

CVE-2025-26557

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in viperchill ViperBar viperbar allows Reflected XSS.This issue affects ViperBar: from n/a through = 2.0...

CVE-2025-26586

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in abelony Events Planner events-planner allows Reflected XSS.This issue affects Events Planner: from n/a through = 1.3.10...