CVE-2025-32637 WordPress WP Donate Plugin <= 2.0 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in ketanajani WP Donate wp-donate allows Stored XSS.This issue affects WP Donate: from n/a through = 2.0...

CVE-2025-32637

CVE-2025-32637 refers to an input handling weakness in the WordPress plugin WP Donate (versions n/a through 2.0) that allows stored XSS due to improper input neutralization during web page generation. The vulnerability is rated with CVSS 3.1 base score 7.1 (High) and an impact profile indicating ...

CVE-2025-32637 WordPress WP Donate Plugin <= 2.0 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in ketanajani WP Donate wp-donate allows Stored XSS.This issue affects WP Donate: from n/a through = 2.0...

CVE-2025-39595 WordPress Quentn WP plugin <= 1.2.8 - SQL Injection Vulnerability

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Quentn.com GmbH Quentn WP quentn-wp allows SQL Injection.This issue affects Quentn WP: from n/a through = 1.2.8...

CVE-2025-39595

CVE-2025-39595 affects Quentn WP (WordPress plugin) up to version 1.2.8. Root cause: improper neutralization of input elements enables unauthenticated SQL Injection. Impact per the CVSS metrics: Confidentiality impact HIGH; Availability LOW; Integrity NONE; Attack vector NETWORK; User interaction...

CVE-2025-39595 WordPress Quentn WP plugin <= 1.2.8 - SQL Injection Vulnerability

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Quentn.com GmbH Quentn WP quentn-wp allows SQL Injection.This issue affects Quentn WP: from n/a through = 1.2.8...

CVE-2025-39596 WordPress Quentn WP <= 1.2.8 - Privilege Escalation Vulnerability

Weak Authentication vulnerability in Quentn.com GmbH Quentn WP allows Privilege Escalation. This issue affects Quentn WP: from n/a through 1.2.8...

CVE-2025-39596 WordPress Quentn WP plugin <= 1.2.8 - Privilege Escalation Vulnerability

Weak Authentication vulnerability in Quentn.com GmbH Quentn WP quentn-wp allows Privilege Escalation.This issue affects Quentn WP: from n/a through = 1.2.8...

CVE-2025-39596

CVE-2025-39596 relates to the WordPress plugin Quentn WP (versions

CVE-2025-22796

The CVE-2025-22796 entry concerns the WordPress WP-Asambleas plugin (versions up to and including 2.85.0). The vulnerability is an Improper Neutralization of Input During Web Page Generation, i.e., a Reflected Cross-Site Scripting (XSS) flaw in WP-Asambleas. The root cause is unneutralized user i...

CVE-2025-22796 WordPress WP-Asambleas Plugin <= 2.85.0 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in platcom WP-Asambleas allows Reflected XSS. This issue affects WP-Asambleas: from n/a through 2.85.0...

CVE-2025-22796 WordPress WP-Asambleas Plugin <= 2.85.0 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in platcom WP-Asambleas wp-asambleas allows Reflected XSS.This issue affects WP-Asambleas: from n/a through = 2.85.0...

CVE-2025-39420

CVE-2025-39420 affects the WordPress WP Twitter Button plugin (versions

CVE-2025-39422 WordPress WP Social Bookmarking plugin <= 3.6 - Cross Site Request Forgery (CSRF) vulnerability

Cross-Site Request Forgery CSRF vulnerability in PResponsive WP Social Bookmarking wp-social-bookmarking allows Stored XSS.This issue affects WP Social Bookmarking: from n/a through = 3.6...

CVE-2025-39421 WordPress WP Sticky Side Buttons plugin <= 2.1 - Cross Site Request Forgery (CSRF) vulnerability

Cross-Site Request Forgery CSRF vulnerability in Mustafa KUCUK WP Sticky Side Buttons allows Stored XSS. This issue affects WP Sticky Side Buttons: from n/a through 2.1...

CVE-2025-39421

CVE-2025-39421 describes a CSRF vulnerability in the WordPress plugin WP Sticky Side Buttons (Mustafa KUCUK) that enables stored XSS. The CVE entry states the vulnerability affects WP Sticky Side Buttons versions from n/a up to and including 2.1, with CVSSv3.1 metrics (AV:N/AC:L/PR:N/UI:R/S:C/C:L...

CVE-2025-39421 WordPress WP Sticky Side Buttons plugin <= 2.1 - Cross Site Request Forgery (CSRF) vulnerability

Cross-Site Request Forgery CSRF vulnerability in Mustafa KUCUK WP Sticky Side Buttons wp-sticky-side-buttons allows Stored XSS.This issue affects WP Sticky Side Buttons: from n/a through = 2.1...

CVE-2025-39427 WordPress WP Post to PDF Enhanced plugin <= 1.1.1 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Beth Tucker Long WP Post to PDF Enhanced allows Stored XSS. This issue affects WP Post to PDF Enhanced: from n/a through 1.1.1...

CVE-2025-39427

CVE-2025-39427 is a stored Cross-Site Scripting (XSS) vulnerability in the WordPress plugin WP Post to PDF Enhanced . The issue arises from improper input neutralization during web page generation, allowing stored XSS. Affected versions are listed as from none (n/a) through 1.1.1 . Public referen...

CVE-2025-26990

Server-Side Request Forgery SSRF vulnerability in WP Royal Royal Elementor Addons royal-elementor-addons allows Server Side Request Forgery.This issue affects Royal Elementor Addons: from n/a through = 1.7.1006...