WordPress plugin WP-Recall 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security...

CVE-2025-30620

Cross-Site Request Forgery CSRF vulnerability in coderscom WP Odoo Form Integrator wp-odoo-form-integrator allows Stored XSS.This issue affects WP Odoo Form Integrator: from n/a through = 1.1.0...

CVE-2025-30615

Cross-Site Request Forgery CSRF vulnerability in Jacob Schwartz WP e-Commerce Style Email wp-e-commerce-style-email allows Code Injection.This issue affects WP e-Commerce Style Email: from n/a through = 0.6.2...

CVE-2025-30610

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in catchsquare WP Social Widget wp-social-widget allows Stored XSS.This issue affects WP Social Widget: from n/a through = 2.2.7...

CVE-2025-30600

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in thiagogsrwp WP Hotjar wp-hotjar allows Stored XSS.This issue affects WP Hotjar: from n/a through = 0.0.3...

CVE-2025-30599

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in wp-maverick WP Parallax Content Slider wp-parallax-content-slider allows Stored XSS.This issue affects WP Parallax Content Slider: from n/a through = 0.9.8...

CVE-2025-30569

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Jahertor WP Featured Entries wp-featured-entries allows SQL Injection.This issue affects WP Featured Entries: from n/a through = 1.0...

CVE-2025-30531

Cross-Site Request Forgery CSRF vulnerability in GBS Developer WP Ride Booking wp-ride-booking allows Cross Site Request Forgery.This issue affects WP Ride Booking: from n/a through = 2.4...

CVE-2025-30525

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in ProfitShare.ro WP Profitshare wp-profitshare allows SQL Injection.This issue affects WP Profitshare: from n/a through = 1.4.9...

CVE-2025-30620 WordPress WP Odoo Form Integrator plugin <=1.1.0 - CSRF to Stored XSS vulnerability

Cross-Site Request Forgery CSRF vulnerability in coderscom WP Odoo Form Integrator wp-odoo-form-integrator allows Stored XSS.This issue affects WP Odoo Form Integrator: from n/a through = 1.1.0...

CVE-2025-30620

CVE-2025-30620: In WordPress plugin WP Odoo Form Integrator, a Cross-Site Request Forgery (CSRF) flaw can lead to Stored XSS in the affected component. The advisory indicates the vulnerability affects WP Odoo Form Integrator versions up to 1.1.0 (no public details on root cause beyond CSRF leadin...

CVE-2025-30615

CVE-2025-30615 is a Cross-Site Request Forgery leading to Remote Code Execution in the WordPress plugin WP e-Commerce Style Email . The Wordfence vulnerability list documents a CSRF-to-RCE chain for this plugin, affecting version range from unknown/na to 0.6.2, with a CVSSv3.1 base score of 9.6 (...

CVE-2025-30615 WordPress WP e-Commerce Style Email plugin <= 0.6.2 - CSRF to Remote Code Execution vulnerability

Cross-Site Request Forgery CSRF vulnerability in Jacob Schwartz WP e-Commerce Style Email wp-e-commerce-style-email allows Code Injection.This issue affects WP e-Commerce Style Email: from n/a through = 0.6.2...

CVE-2025-30610 WordPress WP Social Widget plugin <= 2.2.7 - Cross Site Scripting (XSS) Vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in catchsquare WP Social Widget wp-social-widget allows Stored XSS.This issue affects WP Social Widget: from n/a through = 2.2.7...

CVE-2025-30610

CVE-2025-30610 is an authenticated stored XSS in the WordPress plugin WP Social Widget. The vulnerability arises from improper neutralization of user input during web page generation, affecting WP Social Widget versions up to 2.2.6 (inclusive). Connected sources indicate this entry has not been p...

CVE-2025-30599 WordPress WP Parallax Content Slider plugin <= 0.9.8 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in wp-maverick WP Parallax Content Slider wp-parallax-content-slider allows Stored XSS.This issue affects WP Parallax Content Slider: from n/a through = 0.9.8...

CVE-2025-30600

CVE-2025-30600 - Stored XSS in WP Hotjar (thiagogsrwp) affecting WP Hotjar from 0.0.0 through 0.0.3. The vulnerability is described as an Improper Neutralization of Input During Web Page Generation (XSS). CVSS 3.1 base score 5.9 (Network, Low/Medium impact). Exploitation status is not detailed in...

CVE-2025-30599

CVE-2025-30599 is a stored XSS in the WordPress plugin WP Parallax Content Slider (versions up to 0.9.8). Root cause: improper input neutralization during web page generation. Public details indicate a stored cross-site scripting risk that can affect users via the plugin’s output; no specific exp...

CVE-2025-30600 WordPress WP Hotjar plugin <= 0.0.3 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in thiagogsrwp WP Hotjar wp-hotjar allows Stored XSS.This issue affects WP Hotjar: from n/a through = 0.0.3...

CVE-2025-30569

CVE-2025-30569 is a documented SQL Injection affecting the WordPress plugin WP Featured Entries . The vulnerability is described as an authenticated issue (Contributor+ level) that allows SQL injection, impacting versions up to and including 1.0. Patch status in the connected disclosure is listed...