CVE-2025-22796

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in platcom WP-Asambleas wp-asambleas allows Reflected XSS.This issue affects WP-Asambleas: from n/a through = 2.85.0...

PT-2025-7727 · WordPress · Wp-Asambleas

Name of the Vulnerable Software and Affected Versions: WP-Asambleas versions 2.85.0 and earlier Description: The issue is related to a Missing Authorization vulnerability in WP-Asambleas, which allows exploitation due to incorrectly configured access control security levels. Recommendations: For...

PT-2025-6574 · WordPress · Wp-Asambleas

Name of the Vulnerable Software and Affected Versions: WP-Asambleas plugin for WordPress versions up to, and including, 2.85.0 Description: The issue is related to Stored Cross-Site Scripting via the plugin's 'polls popup' shortcode due to insufficient input sanitization and output escaping on...

WordPress WP-Asambleas Plugin <= 2.85.0 - Reflected Cross Site Scripting (XSS) vulnerability

Reflected Cross Site Scripting XSS vulnerability discovered by LVT-tholv2k Patchstack Alliance in WordPress Plugin WP-Asambleas versions = 2.85.0...