EUVD-2025-205277

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in webheadcoder WH Tweaks wh-tweaks allows Stored XSS.This issue affects WH Tweaks: from n/a through = 1.0.2...

CVE-2025-67630

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in webheadcoder WH Tweaks wh-tweaks allows Stored XSS.This issue affects WH Tweaks: from n/a through = 1.0.2...

CVE-2025-24619

The CVE-2025-24619 entry concerns the WordPress plugin WP Log Action (versions 0.51 and earlier). The vulnerability is a Reflected XSS caused by improper input neutralization during web page generation, allowing malicious scripts to be reflected in the response. Public sources (Patchstack, CVE re...

CVE-2025-24619 WordPress WP Log Action Plugin <= 0.51 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in webheadcoder WP Log Action wp-log-action allows Reflected XSS.This issue affects WP Log Action: from n/a through = 0.51...

PT-2025-17037 · WordPress · Webheadcoder Wp Log Action

Name of the Vulnerable Software and Affected Versions: webheadcoder WP Log Action versions 0.51 and earlier Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, allowing Reflected XSS. This enables potential attacker...