CVE-2025-58257 WordPress Verowa Connect plugin <= 3.2.3 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Picture-Planet GmbH Verowa Connect verowa-connect allows Stored XSS.This issue affects Verowa Connect: from n/a through = 3.2.3...

CVE-2024-11460

CVE-2024-11460 (Verowa Connect, WordPress) is an unauthenticated SQL injection in the Verowa Connect plugin (

PT-2024-17012

Name of the Vulnerable Software and Affected Versions Verowa Connect plugin for WordPress versions up to, and including, 3.0.1 Description The issue allows unauthenticated attackers to perform SQL Injection via the search string parameter due to insufficient escaping on the user-supplied paramete...