PT-2025-17092

Name of the Vulnerable Software and Affected Versions WooCommerce Estimate and Quote versions 1.0.2.5 and earlier Description The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, which allows Reflected XSS. This means an attacker...

PT-2025-14435

Name of the Vulnerable Software and Affected Versions WPglob Auto scroll for reading versions n/a through 1.1.4 Description The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, which allows Reflected XSS. This means that an...

PT-2025-12949

Name of the Vulnerable Software and Affected Versions Key4ce osTicket Bridge versions 1.4.0 and earlier Description The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, which allows Reflected XSS. This means that an attacker can...

PT-2025-12892

Name of the Vulnerable Software and Affected Versions GetSocial versions through 2.0.1 Description The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, which allows Reflected XSS. This means an attacker can inject malicious scrip...

PT-2025-12894

Name of the Vulnerable Software and Affected Versions wpsiteeditor Site Editor Google Map versions 1.0.1 and earlier Description The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, which allows Reflected XSS. This means that an...

PT-2025-12917

Name of the Vulnerable Software and Affected Versions NotFound Cookies Pro versions n/a through 1.0 Description The issue is related to Improper Neutralization of Input During Web Page Generation, also known as 'Cross-site Scripting', which allows Reflected XSS. This means that an attacker can...

PT-2025-12916

Name of the Vulnerable Software and Affected Versions UTM tags tracking for Contact Form 7 versions n/a through 2.1 Description The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, which allows Reflected XSS. This means that an...

PT-2025-12912

Name of the Vulnerable Software and Affected Versions Yendif Player Another Events Calendar versions 1.7.0 and earlier Description The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, which allows Reflected XSS. This means an...

PT-2025-11354

Name of the Vulnerable Software and Affected Versions: WP Discord Post versions n/a through 2.1.0 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, which allows Reflected XSS. This means that an attacker can injec...

PT-2025-6989

Name of the Vulnerable Software and Affected Versions: Internal Links Generator versions n/a through 3.51 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, which allows Reflected XSS. This means that an attacker c...

PT-2025-7009

Name of the Vulnerable Software and Affected Versions: Easy Filter versions 1.10 and earlier Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, which allows Reflected XSS. This means that an attacker can inject...

PT-2024-36300

Name of the Vulnerable Software and Affected Versions: Ecommerce Templates ECT Product Carousel versions n/a through 1.9 Description: The issue is a Cross-Site Request Forgery CSRF vulnerability that allows Stored XSS in Ecommerce Templates ECT Product Carousel. This means an attacker can perform...

PT-2024-24663

Name of the Vulnerable Software and Affected Versions Minoji MJ Update History versions 1.0.4 and earlier Description The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, allowing Reflected XSS. This means an attacker can inject...

PT-2024-24441

Name of the Vulnerable Software and Affected Versions PineWise WP Google Analytics Events versions through 2.8.0 Description The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, which allows Reflected XSS. This means that an...

PT-2023-31096

Name of the Vulnerable Software and Affected Versions HDW Player Plugin Video Player & Video Gallery versions n/a through 5.0 Description The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, which allows Reflected XSS. This means...

PT-2023-30942

Name of the Vulnerable Software and Affected Versions Crocoblock JetBlocks For Elementor versions 1.3.8 and earlier Description The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, which allows Reflected XSS. This means that an...

PT-2023-22975

Name of the Vulnerable Software and Affected Versions Theme Blvd Tweeple plugin versions 0.9.5 and earlier Description The issue is an Unauth. Reflected Cross-Site Scripting XSS vulnerability. This means that an attacker can inject malicious scripts into a website, potentially allowing them to...

PT-2023-29389

Name of the Vulnerable Software and Affected Versions 10Web Form Builder Team Form Maker by 10Web – Mobile-Friendly Drag & Drop Contact Form Builder plugin versions = 1.15.18 Description The issue is an Unauth. Reflected Cross-Site Scripting XSS vulnerability. This means that an attacker can inje...

PT-2023-29144

Name of the Vulnerable Software and Affected Versions Online Movie Ticket Booking System version 1.0 Description The issue is an authenticated Reflected Cross-Site Scripting vulnerability. This means that an attacker could potentially inject malicious scripts into the system, which would then be...

PT-2020-20450

Name of the Vulnerable Software and Affected Versions Jeedom versions prior to 4.0.39 Description The issue allows for cross-site scripting XSS, which is a type of attack where an attacker can inject malicious scripts into a website, potentially allowing them to steal user data or take control of...