CVE-2025-49437

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in worstguy WP LOL Rotation league-of-legends-rotation allows Stored XSS.This issue affects WP LOL Rotation: from n/a through = 1.0...

CVE-2025-49065

The CVE-2025-49065 entry concerns the WordPress Visit Counter plugin, affected versions n/a through 1.0. The vulnerability is anStored Cross-Site Scripting (XSS) caused by improper neutralization of input during web page generation in the Visit Counter feature. The connected documents confirm the...