PT-2025-1631 · WordPress · Firecask Like & Share Button

Name of the Vulnerable Software and Affected Versions: FireCask Like & Share Button plugin for WordPress versions up to, and including, 1.2 Description: The issue is related to Stored Cross-Site Scripting via the width parameter due to insufficient input sanitization and output escaping. This...

WordPress Related Post Shortcode Plugin <= 1.2 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by Pham Ngoc Duy Patchstack Alliance in WordPress Plugin Related Post Shortcode versions = 1.2...

CVE-2025-23693

Cross-Site Request Forgery CSRF vulnerability in uosiu Secure CAPTCHA secure-captcha allows Stored XSS.This issue affects Secure CAPTCHA: from n/a through = 1.2...

CVE-2025-23557

Cross-Site Request Forgery CSRF vulnerability in Kathleen Malone Find Your Reps find-your-reps allows Stored XSS.This issue affects Find Your Reps: from n/a through = 1.2...

CVE-2025-23693

CVE-2025-23693 describes a CSRF vulnerability in the Secure CAPTCHA plugin that can lead to a Stored XSS. Affected product: Secure CAPTCHA (plugin) with vulnerable behavior reported as allowing CSRF-to-XSS. Version scope cited as from unspecified/n-a through 1.2. Root cause: CSRF in the CAPTCHA w...

CVE-2025-23436

CVE-2025-23436 describes a CSRF-to-Stored XSS in the WordPress plugin Wp-Scribd-List (vulnerable through 1.2). Exploitation, per the CVSS metrics, requires user interaction and can impact confidentiality, integrity, and availability. Affected software: Wp-Scribd-List

WordPress WordPress File Search Plugin <= 1.2 - Reflected Cross Site Scripting (XSS) vulnerability

Reflected Cross Site Scripting XSS vulnerability discovered by Le Ngoc Anh in WordPress Plugin WordPress File Search versions = 1.2...

WordPress WPDB to Sql plugin <= 1.2 - Sensitive Data Exposure vulnerability

Sensitive Data Exposure vulnerability discovered by Mika in WordPress Plugin WPDB to Sql versions = 1.2...

WordPress Hack me if you can plugin <= 1.2 - CSRF to Stored XSS vulnerability

CSRF to Stored XSS vulnerability discovered by SOPROBRO in WordPress Plugin Hack me if you can versions = 1.2...

WordPress MACME plugin <= 1.2 - Reflected Cross Site Scripting (XSS) vulnerability

Reflected Cross Site Scripting XSS vulnerability discovered by João Pedro Soares de Alcântara Kinorth in WordPress Plugin MACME versions = 1.2...

WordPress Web Testimonials plugin <= 1.2 - CSRF to Stored XSS vulnerability

CSRF to Stored XSS vulnerability discovered by SOPROBRO in WordPress Plugin Web Testimonials versions = 1.2...

WordPress Wp-Scribd-List plugin <= 1.2 - CSRF to XSS vulnerability

CSRF to XSS vulnerability discovered by Joshua Chan in WordPress Plugin Wp-Scribd-List versions = 1.2...

PT-2025-5045 · Unknown · Hack Me If You Can

Name of the Vulnerable Software and Affected Versions: Hack me if you can versions n/a through 1.2 Description: The issue is a Cross-Site Request Forgery CSRF vulnerability that allows Stored XSS. This means an attacker can trick a user into performing unintended actions on a web application, and...

WordPress plugin Easy Shortcode Buttons 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site scripting vulnerability exists...

PT-2025-5123 · WordPress · Easy Shortcode Buttons

Name of the Vulnerable Software and Affected Versions: Easy Shortcode Buttons versions n/a through 1.2 Description: The issue is related to improper neutralization of input during web page generation, which allows for Stored Cross-site Scripting XSS. This means that an attacker can inject malicio...

WordPress plugin GMAPS for WPBakery Page Builder Free 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...

PT-2025-4879 · Unknown · Wp-Scribd-List

Name of the Vulnerable Software and Affected Versions: Wp-Scribd-List versions 1.2 and earlier Description: The issue is related to a Cross-Site Request Forgery CSRF vulnerability in Capa Wp-Scribd-List, which allows Stored XSS. Recommendations: For versions 1.2 and earlier, update to a version...

WordPress plugin Find Your Reps 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. The platform supports personal blog sites on servers running PHP and MySQL. WordPress plugin is an application plugin. A cross-site request forgery...

PT-2025-4919 · Sanjaysolutions · Sanjaysolutions Loginplus

Name of the Vulnerable Software and Affected Versions: Sanjaysolutions Loginplus versions n/a through 1.2 Description: The issue is related to a missing authorization vulnerability in Sanjaysolutions Loginplus, which allows accessing functionality not properly constrained by Access Control Lists...

WordPress plugin Wp-Scribd-List 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site reques...