CVE-2025-27333

CVE-2025-27333 | The Protected wp-login WordPress plugin is affected by a Reflected XSS due to improper input neutralization in web page generation. Affected: Protected wp-login

CVE-2025-32490 WordPress wp secure plugin <= 1.2 - Cross Site Scripting (XSS) Vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in WebsiteDefender wp secure wp-secure-by-sitesecuritymonitorcom allows Stored XSS.This issue affects wp secure: from n/a through = 1.2...

CVE-2025-32490 WordPress wp secure <= 1.2 - Cross Site Scripting (XSS) Vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in WebsiteDefender wp secure allows Stored XSS. This issue affects wp secure: from n/a through 1.2...

CVE-2025-32490

CVE-2025-32490 is an Stored XSS vulnerability in the WordPress plugin wp secure (wp secure by sitesecuritymonitor.com), affecting versions up to 1.2. The issue arises from improper neutralization of input during web page generation. Impact is limited to confidentiality, integrity, and availabilit...

CVE-2025-32530

CVE-2025-32530 describes a Reflected XSS in the WordPress plugin “Wallet System for WooCommerce.” The issue is attributed to improper neutralization of input during web page generation and affects Wallet System for WooCommerce versions up to 2.6.5 (range: from n/a through 2.6.5). The connected Re...

CVE-2025-32557

CVE-2025-32557 is a Reflected XSS in the WordPress plugin WP Featured Screenshot by Rico Macchi, affecting versions from n/a up to 1.3. The vulnerability is described as cross-site scripting during web page generation. The connected data confirms CVSS 3.1 (AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L, bas...

CVE-2025-32557 WordPress WP Featured Screenshot Plugin <= 1.3 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Rico Macchi WP Featured Screenshot wp-featured-screenshot allows Reflected XSS.This issue affects WP Featured Screenshot: from n/a through = 1.3...

CVE-2025-32560 WordPress WP-Hijri Plugin <= 1.5.3 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Mohammad I. Okfie WP-Hijri allows Reflected XSS. This issue affects WP-Hijri: from n/a through 1.5.3...

CVE-2025-32560

CVE-2025-32560 concerns the WordPress WP-Hijri plugin. The connected Red Hat/Redundant sources and NVD entries specify an Improp er Neutralization of Input During Web Page Generation (Reflected XSS) vulnerability affecting the WP-Hijri plugin versions up to and including 1.5.3 . The description c...

CVE-2025-32560 WordPress WP-Hijri Plugin <= 1.5.3 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Mohammad I. Okfie WP-Hijri wp-hijri allows Reflected XSS.This issue affects WP-Hijri: from n/a through = 1.5.3...

CVE-2025-32562 WordPress WP Easy Poll Plugin <= 2.2.9 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in aviplugins.com WP Easy Poll wp-easy-poll-afo allows Reflected XSS.This issue affects WP Easy Poll: from n/a through = 2.2.9...

CVE-2025-32582 WordPress WP AutoKeyword Plugin <= 1.0 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in EXEIdeas International WP AutoKeyword wp-autokeyword allows Stored XSS.This issue affects WP AutoKeyword: from n/a through = 1.0...

CVE-2025-32582 WordPress WP AutoKeyword Plugin <= 1.0 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in EXEIdeas International WP AutoKeyword wp-autokeyword allows Stored XSS.This issue affects WP AutoKeyword: from n/a through = 1.0...

CVE-2025-32582

CVE-2025-32582 – WP AutoKeyword (WordPress) Stored XSS . The vulnerability affects the WP AutoKeyword plugin for WordPress, reported for versions up to 1.0. The flaw arises from improper neutralization of input during web page generation, enabling stored cross-site scripting. Impact is described ...

CVE-2025-32594 WordPress Simple WP Events plugin <= 1.8.17 - Sensitive Data Exposure vulnerability

Insertion of Sensitive Information Into Sent Data vulnerability in WPMinds Simple WP Events simple-wp-events allows Retrieve Embedded Sensitive Data.This issue affects Simple WP Events: from n/a through = 1.8.17...

CVE-2025-32594

CVE-2025-32594 – Publicly disclosed vulnerability in WordPress plugin Simple WP Events (

CVE-2025-32594 WordPress Simple WP Events plugin <= 1.8.17 - Sensitive Data Exposure vulnerability

Insertion of Sensitive Information Into Sent Data vulnerability in WPMinds Simple WP Events allows Retrieve Embedded Sensitive Data. This issue affects Simple WP Events: from n/a through 1.8.17...

CVE-2025-32630 WordPress WP-BusinessDirectory Plugin <= 3.1.2 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in CMSJunkie - WordPress Business Directory Plugins WP-BusinessDirectory wp-businessdirectory allows Reflected XSS.This issue affects WP-BusinessDirectory: from n/a through = 3.1.2...

CVE-2025-32637 WordPress WP Donate Plugin <= 2.0 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in ketanajani WP Donate wp-donate allows Stored XSS.This issue affects WP Donate: from n/a through = 2.0...

CVE-2025-32637

CVE-2025-32637 refers to an input handling weakness in the WordPress plugin WP Donate (versions n/a through 2.0) that allows stored XSS due to improper input neutralization during web page generation. The vulnerability is rated with CVSS 3.1 base score 7.1 (High) and an impact profile indicating ...