CVE-2023-26003

CVE-2023-26003 describes an SQL injection in the WordPress plugin WP Post Corrector (WP Post Corrector) that affects versions up to 1.0.2. The root cause is improper neutralization of special elements in SQL queries, enabling an attacker to manipulate the backend database through the plugin. The ...

CVE-2023-26003 WordPress WP Post Corrector plugin <= 1.0.2 - SQL Injection Vulnerability

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in vipul Jariwala WP Post Corrector wp-post-corrector allows SQL Injection.This issue affects WP Post Corrector: from n/a through = 1.0.2...

CVE-2025-27359

CVE-2025-27359 is a Cross-Site Request Forgery (CSRF) vulnerability affecting the WP Media File Type Manager plugin for WordPress. The issue allows CSRF to be performed against plugin settings, with affected versions listed as up to 2.3.0 (vendor is referenced as WP Media File Type Manager). The ...

CVE-2025-27359 WordPress WP Media File Type Manager plugin <= 2.3.1 - Cross Site Request Forgery (CSRF) vulnerability

Cross-Site Request Forgery CSRF vulnerability in Seerox WP Media File Type Manager wp-media-file-type-manager allows Cross Site Request Forgery.This issue affects WP Media File Type Manager: from n/a through = 2.3.1...

CVE-2025-27360

CVE-2025-27360 describes a Cross-Site Request Forgery (CSRF) vulnerability in the WordPress plugin Quick Event Calendar . The issue affects the plugin version range “from n/a through 1.4.9,” indicating presence in older builds up to 1.4.9. The description identifies CSRF as the core issue, but th...

CVE-2025-28974

CVE-2025-28974 is a CSRF-to-Stored XSS vulnerability in the Free WP Mail SMTP (mail250) WordPress plugin. The issue affects Free WP Mail SMTP versions from n/a through 1.0, with a CVSSv3.1 base score of 7.1 (High). The connected documentation confirms the vulnerability class (CSRF leading to Stor...

CVE-2025-28974 WordPress Free WP Mail SMTP plugin <= 1.0 - Cross Site Request Forgery (CSRF) to Stored XSS vulnerability

Cross-Site Request Forgery CSRF vulnerability in mail250 Free WP Mail SMTP free-wp-mail-smtp allows Stored XSS.This issue affects Free WP Mail SMTP: from n/a through = 1.0...

CVE-2025-28981 WordPress WP Mail Options plugin <= 0.2.3 - Cross Site Request Forgery (CSRF) to Stored XSS vulnerability

Cross-Site Request Forgery CSRF vulnerability in Soli WP Mail Options wp-mail-options allows Stored XSS.This issue affects WP Mail Options: from n/a through = 0.2.3...

CVE-2025-28981

CVE-2025-28981 is a vulnerability in the WordPress plugin WP Mail Options . The connected Red Hat entry confirms a Cross-Site Request Forgery (CSRF) condition that allows a Stored XSS via WP Mail Options, affecting versions listed as from n/a through 0.2.3. The CVE description in the initial docu...

CVE-2025-28995

CVE-2025-28995 applies to Viral Loops WP Integration (WordPress plugin). The issue is described as a Missing Authorization vulnerability due to misconfigured access control levels, affecting Viral Loops WP Integration versions up to 3.8.1 (no fixed version specified in the provided documents). CV...

CVE-2025-28995 WordPress Viral Loops WP Integration plugin <= 3.8.1 - Broken Access Control Vulnerability

Missing Authorization vulnerability in viralloops Viral Loops WP Integration viral-loops-wp-integration allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Viral Loops WP Integration: from n/a through = 3.8.1...

CVE-2025-28994

CVE-2025-28994 affects Viral Loops WP Integration (WordPress plugin) up to version 3.8.1 and is reported as a Missing Authorization vulnerability (bypass of access control). The available connected sources provide the issue and affected versions, but do not include exploit details. Public status ...

CVE-2025-28997

CVE-2025-28997 : WP AutoKeyword (WordPress plugin) is listed as missing authorization in versions up to 1.0, implying access-control misconfigurations as root cause. The connected records do not provide a patch version or remediation; no exploitation status is stated. Technical details beyond aff...

CVE-2025-28997 WordPress WP AutoKeyword plugin <= 1.0 - Broken Access Control Vulnerability

Missing Authorization vulnerability in EXEIdeas International WP AutoKeyword wp-autokeyword allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP AutoKeyword: from n/a through = 1.0...

CVE-2025-28997 WordPress WP AutoKeyword plugin <= 1.0 - Broken Access Control Vulnerability

Missing Authorization vulnerability in EXEIdeas International WP AutoKeyword wp-autokeyword allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP AutoKeyword: from n/a through = 1.0...

CVE-2025-30634 WordPress WP Featured Content Slider plugin <= 2.6 - Cross Site Scripting (XSS) Vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in IWEBIX WP Featured Content Slider wp-featured-content-slider allows Stored XSS.This issue affects WP Featured Content Slider: from n/a through = 2.6...

CVE-2025-30634 WordPress WP Featured Content Slider plugin <= 2.6 - Cross Site Scripting (XSS) Vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in IWEBIX WP Featured Content Slider wp-featured-content-slider allows Stored XSS.This issue affects WP Featured Content Slider: from n/a through = 2.6...

CVE-2025-30634

CVE-2025-30634 affects the WordPress plugin WP Featured Content Slider (WP Featured Content Slider) and is caused by Improper Neutralization of Input During Web Page Generation, enabling Stored XSS. The vulnerability targets WP Featured Content Slider versions up to and including 2.6 and is confi...

CVE-2025-30928 WordPress WP Biographia plugin <= 4.0.0 - Cross Site Scripting (XSS) Vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in vicchi WP Biographia wp-biographia allows Stored XSS.This issue affects WP Biographia: from n/a through = 4.0.0...

CVE-2025-30928

CVE-2025-30928 : A stored XSS in the WP Biographia plugin for WordPress (vicchi WP Biographia) is caused by improper neutralization of input during web page generation. Affected: WP Biographia versions up to 4.0.0. Underlying issue per the CVSS 3.1 data: Network attack vector, low access complexi...