CVE-2025-23956

CVE-2025-23956 is a WordPress WordPress WP Easy Post Mailer plugin vulnerability described as an improper neutralization of input during web page generation, leading to a Reflected XSS . Affected software: WP Easy Post Mailer (versions up to 0.64). Root cause: improper input handling during page ...

CVE-2025-23843 WordPress WP-HR Manager plugin <= 3.1.0 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in wphrmanager WP-HR Manager: The Human Resources Plugin for WordPress wp-hr-manager allows Reflected XSS.This issue affects WP-HR Manager: The Human Resources Plugin for WordPress: from n/a through =...

CVE-2025-23843 WordPress WP-HR Manager plugin <= 3.1.0 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in wphrmanager WP-HR Manager: The Human Resources Plugin for WordPress wp-hr-manager allows Reflected XSS.This issue affects WP-HR Manager: The Human Resources Plugin for WordPress: from n/a through =...

CVE-2025-23843

CVE-2025-23843: Reflected Cross-Site Scripting in WP-HR Manager WordPress plugin. The vulnerability arises from improper input neutralization in the WP-HR Manager: The Human Resources Plugin for WordPress (versions up to and including 3.1.0), allowing reflected XSS via crafted input during web pa...

CVE-2025-23739 WordPress WP Ultimate Reviews FREE plugin <= 1.0.2 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in jtibbles WP Ultimate Reviews FREE wp-ultimate-reviews-free allows Reflected XSS.This issue affects WP Ultimate Reviews FREE: from n/a through = 1.0.2...

CVE-2025-23739

CVE-2025-23739 is a Reflected Cross-Site Scripting vulnerability in the WordPress plugin WP Ultimate Reviews FREE (NotFound) affecting versions up to 1.0.2. The issue results from improper neutralization of input during web page generation. The available documents confirm the vulnerability and im...

CVE-2025-23613

WordPress WP Journal plugin

CVE-2025-23613 WordPress WP Journal plugin <= 1.1 - Broken Access Control vulnerability

Missing Authorization vulnerability in mediabeta WP Journal wpjournal allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Journal: from n/a through = 1.1...

CVE-2025-23613 WordPress WP Journal plugin <= 1.1 - Broken Access Control vulnerability

Missing Authorization vulnerability in mediabeta WP Journal wpjournal allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Journal: from n/a through = 1.1...

CVE-2025-23586 WordPress WP Post Category Notifications plugin <= 1.0 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in MAL73049 WP Post Category Notifications wp-post-category-notifications allows Reflected XSS.This issue affects WP Post Category Notifications: from n/a through = 1.0...

CVE-2025-23586

CVE-2025-23586 concerns the WordPress plugin WP Post Category Notifications (versions &lt;= 1.0). The vulnerability is a reflected Cross-Site Scripting (XSS) flaw caused by improper neutralization of input during web page generation, enabling attacker-controlled input to be reflected in a web pag...

CVE-2025-23570 WordPress WP Social Links plugin <= 0.3.1 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Mitchell Bundy WP Social Links wp-social-links allows Reflected XSS.This issue affects WP Social Links: from n/a through = 0.3.1...

CVE-2025-23576 WordPress WP Intro.JS Plugin plugin <= 1.1 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in cfuze WP Intro.JS wp-intro-js-tours allows Reflected XSS.This issue affects WP Intro.JS: from n/a through = 1.1...

CVE-2025-23564 WordPress WP FixTag plugin <= v2.0.2 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in mohsenshahbazi WP FixTag wp-fixtag allows Reflected XSS.This issue affects WP FixTag: from n/a through = v2.0.2...

CVE-2025-23576

CVE-2025-23576 relates to a Reflected XSS in the WordPress WP Intro.JS plugin (versions

CVE-2025-23576 WordPress WP Intro.JS Plugin plugin <= 1.1 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in cfuze WP Intro.JS wp-intro-js-tours allows Reflected XSS.This issue affects WP Intro.JS: from n/a through = 1.1...

CVE-2025-23570 WordPress WP Social Links plugin <= 0.3.1 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Mitchell Bundy WP Social Links wp-social-links allows Reflected XSS.This issue affects WP Social Links: from n/a through = 0.3.1...

CVE-2025-23564 WordPress WP FixTag plugin <= v2.0.2 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in mohsenshahbazi WP FixTag allows Reflected XSS. This issue affects WP FixTag: from n/a through v2.0.2...

CVE-2025-23570

CVE-2025-23570 is a Reflected XSS in the WordPress WP Social Links plugin (

CVE-2025-23564

CVE-2025-23564 covers a Reflected XSS in the WordPress WP FixTag plugin (versions up to and including v2.0.2). The issue is described as improper neutralization of input during web page generation, enabling reflected XSS. Affected product: WP FixTag (WordPress plugin). Impact per the CVE metadata...