CVE-2025-47522 WordPress AWEOS WP Lock <= 1.4.8 - Cross Site Scripting (XSS) Vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in AWEOS GmbH AWEOS WP Lock allows Stored XSS. This issue affects AWEOS WP Lock: from n/a through 1.4.8...

CVE-2025-47522

CVE-2025-47522 affects AWEOS WP Lock (WordPress plugin) via a Stored XSS in input handling during web page generation. Affected: AWEOS WP Lock versions up to 1.4.8. Root cause: improper neutralization of input during page generation. Impact per available data: low-to-moderate (CVE score ~5.9; Con...

CVE-2025-47515 WordPress WP DPE-GES <= 1.6 - Cross Site Scripting (XSS) Vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Seb WP DPE-GES allows DOM-Based XSS. This issue affects WP DPE-GES: from n/a through 1.6...

CVE-2025-47515 WordPress WP DPE-GES plugin <= 1.6 - Cross Site Scripting (XSS) Vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Seb WP DPE-GES wp-dpe-ges allows DOM-Based XSS.This issue affects WP DPE-GES: from n/a through = 1.6...

CVE-2025-47515

CVE-2025-47515 affects the WP DPE-GES WordPress plugin (Seb WP DPE-GES) with DOM-based XSS due to improper input neutralization during web page generation; affected versions are up to 1.6. A patch/fixed version exists; upgrade to the fixed version as remediation. Exploit status is not provided in...

CVE-2025-47491

CVE-2025-47491 describes a CSRF vulnerability in the WordPress plugin Contact Form Widget (A WP Life Contact Form Widget), affecting versions up to 1.4.6. The CVSS v3.1 base score is 7.4 (HIGH) with UI required and no confidentiality/integrity impact (I=I, A=N, C=H). Exploitation details are not ...

CVE-2025-47490 WordPress Ultimate WP Mail <= 1.3.4 - SQL Injection Vulnerability

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Rustaurius Ultimate WP Mail allows SQL Injection. This issue affects Ultimate WP Mail: from n/a through 1.3.4...

CVE-2025-47490 WordPress Ultimate WP Mail plugin <= 1.3.4 - SQL Injection Vulnerability

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Rustaurius Ultimate WP Mail ultimate-wp-mail allows SQL Injection.This issue affects Ultimate WP Mail: from n/a through = 1.3.4...

CVE-2025-47490

CVE-2025-47490 is a WordPress vulnerability in the Ultimate WP Mail plugin (versions up to 1.3.4) causing SQL Injection due to improper neutralization of input in SQL commands. Documented references show the issue affects Ultimate WP Mail

CVE-2025-47466 WordPress Ultimate WP Mail plugin <= 1.3.4 - Cross Site Request Forgery (CSRF) Vulnerability

Cross-Site Request Forgery CSRF vulnerability in Rustaurius Ultimate WP Mail ultimate-wp-mail allows Cross Site Request Forgery.This issue affects Ultimate WP Mail: from n/a through = 1.3.4...

CVE-2025-47466 WordPress Ultimate WP Mail plugin <= 1.3.4 - Cross Site Request Forgery (CSRF) Vulnerability

Cross-Site Request Forgery CSRF vulnerability in Rustaurius Ultimate WP Mail ultimate-wp-mail allows Cross Site Request Forgery.This issue affects Ultimate WP Mail: from n/a through = 1.3.4...

CVE-2025-47466

CVE-2025-47466 describes a Cross-Site Request Forgery (CSRF) vulnerability in the WordPress plugin Ultimate WP Mail . Affected versions are listed as from n/a through 1.3.4 . The vulnerability is CSRF-based and the public details in the connected sources indicate no explicit exploit vectors beyon...

CVE-2025-47459

CVE-2025-47459 is a CSRF vulnerability in the WordPress plugin WP Fundraising Donation and Crowdfunding Platform (affected versions: up to 1.7.3). The available connected sources describe the issue and confirm a fix was released in version 1.7.3, with CVSS 3.1 base score 4.3 (Medium) and no explo...

CVE-2025-47459 WordPress WP Fundraising Donation and Crowdfunding Platform <= 1.7.3 - Cross Site Request Forgery (CSRF) Vulnerability

Cross-Site Request Forgery CSRF vulnerability in XpeedStudio WP Fundraising Donation and Crowdfunding Platform allows Cross Site Request Forgery. This issue affects WP Fundraising Donation and Crowdfunding Platform: from n/a through 1.7.3...

CVE-2025-47456 WordPress WP Gravity Forms Zendesk plugin <= 1.1.2 - Open Redirection Vulnerability

URL Redirection to Untrusted Site 'Open Redirect' vulnerability in CRM Perks WP Gravity Forms Zendesk gf-zendesk allows Phishing.This issue affects WP Gravity Forms Zendesk: from n/a through = 1.1.2...

CVE-2025-47456

CVE-2025-47456 describes an Open Redirect vulnerability in the WordPress plugin WP Gravity Forms Zendesk affecting versions up to and including 1.1.2. The issue enables redirection to untrusted sites, facilitating phishing. Public records indicate the vulnerability has been patched, and multiple ...

CVE-2025-47454 WordPress WP Gravity Forms Dynamics CRM plugin <= 1.1.4 - Open Redirection Vulnerability

URL Redirection to Untrusted Site 'Open Redirect' vulnerability in CRM Perks WP Gravity Forms Dynamics CRM gf-dynamics-crm allows Phishing.This issue affects WP Gravity Forms Dynamics CRM: from n/a through = 1.1.4...

CVE-2025-47454

CVE-2025-47454 is an Open Redirect vulnerability in the WordPress plugin WP Gravity Forms Dynamics CRM (CRM Perks) affecting versions up to and including 1.1.4. The issue enables phishing through malicious redirection to untrusted sites. The vulnerability has been patched; patch status indicates ...

CVE-2025-47448 WordPress WP Hotel Booking <= 2.1.9 - Cross Site Request Forgery (CSRF) Vulnerability

Cross-Site Request Forgery CSRF vulnerability in ThimPress WP Hotel Booking allows Cross Site Request Forgery. This issue affects WP Hotel Booking: from n/a through 2.1.9...

CVE-2025-47448

CVE-2025-47448 describes a CSRF vulnerability in the WordPress plugin WP Hotel Booking affecting versions n/a through 2.1.9. Public sources identify the issue as CSRF in this plugin; no exploit details are provided in the documents. Impact is described as unauthorized actions on behalf of an auth...