WordPress VW Education Lite plugin <= 2.2.0 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Nabil Irawan in WordPress Plugin VW Education Lite versions = 2.2.0...

PT-2026-22136

Name of the Vulnerable Software and Affected Versions Stylemix uListing versions through 2.2.0 Description The software contains a flaw due to deserialization of untrusted data, which allows for object injection. This issue impacts the uListing component. Recommendations Versions prior to and...

CVE-2025-52792

CVE-2025-52792 relates to a CSRF-induced Stored XSS in the WordPress plugin WP User Stylesheet Switcher. Affected versions are up to v2.2.0 (inclusive); the vulnerability is unpatched in the provided sources. Exploitation is not confirmed in the documents; CVSS details show a base score of 7.1 (H...

CVE-2024-29112

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in WP Marketing Robot WooCommerce Google Feed Manager allows Stored XSS.This issue affects WooCommerce Google Feed Manager: from n/a through 2.2.0...

CVE-2025-46501 WordPress Mixcloud Embed <= 2.2.0 - Cross Site Scripting (XSS) Vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in biancardi Mixcloud Embed allows Stored XSS. This issue affects Mixcloud Embed: from n/a through 2.2.0...

CVE-2022-47174

Cross-Site Request Forgery CSRF vulnerability in WordPress Performance Team Performance Lab plugin = 2.2.0 versions...