CVE-2025-23919

CVE-2025-23919 is a real vulnerability described in the connected Red Hat entry as an improper neutralization of script-related HTML tags in Ella van Durpe’s Slides & Presentations plugin for WordPress, enabling basic XSS and potential code injection. The issue affects Slides & Presentations vers...

WordPress Post-to-Post Links plugin <= 4.2 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by Pham Van Tam in WordPress Plugin Post-to-Post Links versions = 4.2...

PT-2025-5198 · Unknown · Ella Van Durpe Slides & Presentations

Name of the Vulnerable Software and Affected Versions: Ella van Durpe Slides & Presentations versions 0.0.0 through 0.0.39 Description: The issue is related to the improper neutralization of script-related HTML tags in a web page, which allows for code injection. This is a basic Cross-Site...

WordPress Posts Footer Manager Plugin <= 2.1.0 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by Pham Van Tam Patchstack Alliance in WordPress Plugin Posts Footer Manager versions = 2.1.0...

CVE-2025-22534

Missing Authorization vulnerability in Ella Van Durpe Slides & Presentations slide allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Slides & Presentations: from n/a through = 0.0.39...

CVE-2025-22511

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Ella Van Durpe Slides & Presentations slide allows Stored XSS.This issue affects Slides & Presentations: from n/a through = 0.0.39...

CVE-2025-22511 WordPress Slides & Presentations Plugin <= 0.0.39 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Ella Van Durpe Slides & Presentations slide allows Stored XSS.This issue affects Slides & Presentations: from n/a through = 0.0.39...

WordPress WP Cookie plugin <= 1.0.0 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by Pham Van Tam Patchstack Alliance in WordPress Plugin WP Cookie versions = 1.0.0...

PT-2025-4525 · Unknown · Ella Van Durpe Slides & Presentations

Name of the Vulnerable Software and Affected Versions: Ella van Durpe Slides & Presentations versions 0.0.0 through 0.0.39 Description: The issue is related to a Missing Authorization vulnerability, which allows exploiting incorrectly configured access control security levels. Recommendations: Fo...

PT-2025-4504 · Unknown · Ella Van Durpe Slides & Presentations

Name of the Vulnerable Software and Affected Versions: Ella van Durpe Slides & Presentations versions 0.0.0 through 0.0.39 Description: The issue is related to improper neutralization of input during web page generation, which allows for stored cross-site scripting XSS. This means that an attacke...

WordPress Indeed Ultimate Learning Pro plugin <= 3.9 - SQL Injection vulnerability

SQL Injection vulnerability discovered by Pham Van Tam Patchstack Alliance in WordPress Plugin Ultimate Learning Pro versions = 3.9...

WordPress Highlight plugin <= 2.0.2 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by Pham Van Tam Patchstack Alliance in WordPress Plugin Highlight versions = 2.0.2...

PT-2025-52662

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The Linux kernel contains a flaw related to platform/x86/amd/pmc support for the Van Gogh SoC. Specifically, the ROG Xbox Ally non-X SoC, which shares a similar architecture with the Ste...

CVE-2024-49673

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Van Abel LaTeX2HTML allows Reflected XSS.This issue affects LaTeX2HTML: from n/a through 2.5.4...

CVE-2024-49673

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Van Abel LaTeX2HTML latex2html allows Reflected XSS.This issue affects LaTeX2HTML: from n/a through = 2.5.4...

CVE-2024-49673

CVE-2024-49673 concerns the WordPress LaTeX2HTML plugin where the vulnerability is a reflected Cross-Site Scripting (XSS) in versions n/a through 2.5.4. The issue is described as improper input neutralization during web page generation. Public sources in connected documents indicate the vulnerabi...

CVE-2024-49673 WordPress LaTeX2HTML plugin <= 2.5.4 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Van Abel LaTeX2HTML latex2html allows Reflected XSS.This issue affects LaTeX2HTML: from n/a through = 2.5.4...

CVE-2024-44051

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Johan van der Wijk Content Blocks Custom Post Widget allows Stored XSS.This issue affects Content Blocks Custom Post Widget: from n/a through 3.3.5...

CVE-2024-44051

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Johan van der Wijk Content Blocks Custom Post Widget custom-post-widget allows Stored XSS.This issue affects Content Blocks Custom Post Widget: from n/a through = 3.3.5...

CVE-2024-44051 WordPress Content Blocks (Custom Post Widget) plugin <= 3.3.5 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Johan van der Wijk Content Blocks Custom Post Widget custom-post-widget allows Stored XSS.This issue affects Content Blocks Custom Post Widget: from n/a through = 3.3.5...