CVE-2025-22507

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in iDo8p WPMU Prefill Post wpmu-prefill-post allows SQL Injection.This issue affects WPMU Prefill Post: from n/a through = 1.02...

CVE-2025-22714

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in MDJM Mobile DJ Manager mobile-dj-manager allows Reflected XSS.This issue affects Mobile DJ Manager: from n/a through = 1.7.5.6...

CVE-2025-22785

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in ComMotion Course Booking System course-booking-system allows SQL Injection.This issue affects Course Booking System: from n/a through = 6.0.6...

CVE-2025-22755

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in bavington WP Headmaster wp-headmaster allows Reflected XSS.This issue affects WP Headmaster: from n/a through = 0.3...

CVE-2025-22359

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in pjfc SyncFields syncfields allows Reflected XSS.This issue affects SyncFields: from n/a through = 2.1...

CVE-2025-22539

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in ka2 Custom DataBase Tables custom-database-tables allows Reflected XSS.This issue affects Custom DataBase Tables: from n/a through = 2.1.34...

CVE-2025-22719

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in e4jvikwp VikAppointments Services Booking Calendar vikappointments allows Stored XSS.This issue affects VikAppointments Services Booking Calendar: from n/a through = 1.2.16...

CVE-2025-22548

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in frankkoenen ldaploginpasswordandrolemanager ldap-login-password-and-role-manager allows Stored XSS.This issue affects ldaploginpasswordandrolemanager: from n/a through = 1.0.12...

CVE-2025-22799

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in vertim Neon Product Designer neon-product-designer-for-woocommerce allows SQL Injection.This issue affects Neon Product Designer: from n/a through = 2.2.0...

CVE-2025-22522

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in roya khosravi SingSong singsong allows Stored XSS.This issue affects SingSong: from n/a through = 1.2...

CVE-2025-22355

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in asokaaso2 Kikx Simple Post Author Filter sa-post-author-filter allows Reflected XSS.This issue affects Kikx Simple Post Author Filter: from n/a through = 1.0...

CVE-2025-22760

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in CodeBard CodeBard Help Desk codebard-help-desk allows Reflected XSS.This issue affects CodeBard Help Desk: from n/a through = 1.1.2...

CVE-2025-22588

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in intelligencelab Scanventory woocommerce-inventory-management allows Reflected XSS.This issue affects Scanventory: from n/a through = 1.1.3...

CVE-2025-22537

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in traveller11 Google Maps Travel Route google-maps-travel-route allows SQL Injection.This issue affects Google Maps Travel Route: from n/a through = 1.3.1...

CVE-2025-22294

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in theme funda Custom Field For WP Job Manager custom-field-for-wp-job-manager allows Reflected XSS.This issue affects Custom Field For WP Job Manager: from n/a through = 1.3...

CVE-2025-22348

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in rtowebsites DynamicTags dynamictags allows Blind SQL Injection.This issue affects DynamicTags: from n/a through = 1.4.0...

CVE-2025-22564

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in faaiq Pretty Url pretty-url allows Reflected XSS.This issue affects Pretty Url: from n/a through = 1.5.4...

CVE-2025-22313

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in OTWthemes Widgetize Pages Light widgetize-pages-light allows Reflected XSS.This issue affects Widgetize Pages Light: from n/a through = 3.0...

CVE-2025-22533

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in bulktheme WOOEXIM wooexim allows SQL Injection.This issue affects WOOEXIM: from n/a through = 5.0.0...

CVE-2025-22766

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Masoud Amini Zarinpal Paid Download zarinpal-paid-downloads allows Reflected XSS.This issue affects Zarinpal Paid Download: from n/a through = 2.3...