WordPress plugin Dyn Business Panel 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...

WordPress plugin Donate visa 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...

TP-LINK TL-SG108E 安全漏洞

TP-LINK TL-SG108E is a smart switch from China P&L TP-LINK. A security vulnerability exists in TP-Link TL-SG108E version 1.0.0 Build 20201208 Rel.40304, which stems from a parameter username/password in the file /usraccountset.cgi that can lead to the use of get request methods with sensitive que...

TP-LINK TL-SG108E 安全漏洞

TP-LINK TL-SG108E is a smart switch from China P&L TP-LINK. A security vulnerability exists in TP-LINK TL-SG108E version 1.0.0 Build 20201208 Rel.40304, which stems from the presence of clickjacking...

PT-2025-4023 · Tp Link · Tp-Link Tl-Sg108E

Name of the Vulnerable Software and Affected Versions: TP-Link TL-SG108E version 1.0.0 Build 20201208 Rel. 40304 Description: A vulnerability was found in the TP-Link TL-SG108E, which has been rated as problematic. This issue affects some unknown processing and leads to clickjacking. The attack m...

WordPress plugin WP Smart Tooltip 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...

PT-2025-1988 · WordPress · Dyn Business Panel

Name of the Vulnerable Software and Affected Versions: Dyn Business Panel WordPress plugin version 1.0.0 Description: The issue arises from the plugin not sanitizing and escaping a parameter before outputting it back in the page. This leads to a Reflected Cross-Site Scripting that could be used...

PT-2025-2185 · WordPress · Wp Contact Form7 Email Spam Blocker

Name of the Vulnerable Software and Affected Versions: WP Contact Form7 Email Spam Blocker plugin for WordPress versions up to, and including, 1.0.0 Description: The issue is related to Reflected Cross-Site Scripting via the post parameter due to insufficient input sanitization and output escapin...

PT-2025-5507 · Unknown · Lars Wallenborn Show/Hide Shortcode

Name of the Vulnerable Software and Affected Versions: Lars Wallenborn Show/Hide Shortcode versions 1.0.0 and earlier Description: The issue is related to improper neutralization of input during web page generation, which allows for Stored Cross-site Scripting XSS. This means that an attacker can...

WordPress plugin Show/Hide Shortcode 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site scripting vulnerability exists...

CVE-2025-23679

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Flourish Pixel FP RSS Category Excluder fp-rss-category-excluder allows Reflected XSS.This issue affects FP RSS Category Excluder: from n/a through = 1.0.0...

CVE-2025-23601

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in patrice Tab My Content tab-my-content allows Reflected XSS.This issue affects Tab My Content: from n/a through = 1.0.0...

CVE-2025-22772

CVE-2025-22772 denotes a Reflected Cross-Site Scripting (XSS) vulnerability in the WordPress plugin/package Mapbox for WP Advanced (notFound feature). The root cause, per the description, is the Improp er Neutralization of Input During Web Page Generation . It affects the component that handles N...

CVE-2025-23696 WordPress Staging CDN plugin <= 1.0.0 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Ronan Mockett Staging CDN staging-cdn allows Reflected XSS.This issue affects Staging CDN: from n/a through = 1.0.0...

CVE-2025-23682 WordPress Preloader Quotes plugin <= 1.0.0 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Bhuvnesh Gupta Preloader Quotes preloader-quotes allows Reflected XSS.This issue affects Preloader Quotes: from n/a through = 1.0.0...

CVE-2025-23601

CVE-2025-23601 is a Reflected XSS in the WordPress plugin Tab My Content (NotFound Tab My Content), affecting versions up to 1.0.0. The initial description and Red Hat advisory confirm an improper input handling flaw leading to reflected XSS; CVSSv3.1 base score 7.1 (High, NETWORK attack, UI-REQU...

CVE-2025-23601 WordPress Tab My Content plugin <= 1.0.0 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in NotFound Tab My Content allows Reflected XSS. This issue affects Tab My Content: from n/a through 1.0.0...

PT-2025-4689 · Mapbox · Mapbox For Wp Advanced

Name of the Vulnerable Software and Affected Versions: Mapbox for WP Advanced versions n/a through 1.0.0 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, which allows Reflected XSS. This enables an attacker to...

WordPress plugin Tab My Content 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers running PHP and MySQL. WordPress plugin is an application plugin. A cross-site scripting vulnerabili...

PT-2025-4965 · Unknown · Tab My Content

Name of the Vulnerable Software and Affected Versions: NotFound Tab My Content versions n/a through 1.0.0 Description: The issue is related to improper neutralization of input during web page generation, also known as 'Cross-site Scripting', which allows reflected XSS in the Tab My Content of...