CVE-2025-26935

Path Traversal vulnerability in wpjobportal WP Job Portal allows PHP Local File Inclusion. This issue affects WP Job Portal: from n/a through 2.2.8...

CVE-2025-26935

Path Traversal: '.../...//' vulnerability in wpjobportal WP Job Portal wp-job-portal allows PHP Local File Inclusion.This issue affects WP Job Portal: from n/a through = 2.2.8...

CVE-2025-26904

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in galop WP Responsive Auto Fit Text wp-responsive-slab-text allows DOM-Based XSS.This issue affects WP Responsive Auto Fit Text: from n/a through = 0.2...

CVE-2025-26975

CVE-2025-26975 affects Strong Testimonials (WordPress plugin) and is a Missing Authorization flaw that lets an attacker access functionality not constrained by ACLs. Public details in connected docs indicate the affected range includes versions up to and including 3.2.3. The vulnerability is ackn...

CVE-2025-26974 WordPress WP Multi Store Locator plugin <= 2.5.1 - SQL Injection vulnerability

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in WPExperts.io WP Multistore Locator wp-multi-store-locator allows Blind SQL Injection.This issue affects WP Multistore Locator: from n/a through = 2.5.1...

CVE-2025-26974

CVE-2025-26974 describes an SQL Injection in the WP Multistore Locator (WP Store Locator) WordPress plugin. Affected range: WP Multistore Locator versions up to 2.5.1 (vendor indicates vulnerability existed in versions ≤ 2.5.1; initial doc shows product/versions and CVSS info). The entry is marke...

CVE-2025-26974 WordPress WP Multi Store Locator plugin <= 2.5.1 - SQL Injection vulnerability

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in WPExperts.io WP Multistore Locator wp-multi-store-locator allows Blind SQL Injection.This issue affects WP Multistore Locator: from n/a through = 2.5.1...

CVE-2025-26946 WordPress WP Yelp Review Slider Plugin <= 8.1 - SQL Injection vulnerability

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in jgwhite33 WP Yelp Review Slider wp-yelp-review-slider allows Blind SQL Injection.This issue affects WP Yelp Review Slider: from n/a through = 8.1...

CVE-2025-26946

CVE-2025-26946 refers to a SQL injection vulnerability in the WordPress plugin WP Yelp Review Slider. Connected sources corroborate that the issue affects WP Yelp Review Slider up to version 8.1 and is exploitable by an authenticated administrator. The vulnerability is described as an SQL injecti...

CVE-2025-26946 WordPress WP Yelp Review Slider Plugin <= 8.1 - SQL Injection vulnerability

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in jgwhite33 WP Yelp Review Slider wp-yelp-review-slider allows Blind SQL Injection.This issue affects WP Yelp Review Slider: from n/a through = 8.1...

CVE-2025-26935 WordPress WP Job Portal plugin <= 2.2.8 - Local File Inclusion vulnerability

Path Traversal: '.../...//' vulnerability in wpjobportal WP Job Portal wp-job-portal allows PHP Local File Inclusion.This issue affects WP Job Portal: from n/a through = 2.2.8...

CVE-2025-26935 WordPress WP Job Portal plugin <= 2.2.8 - Local File Inclusion vulnerability

Path Traversal: '.../...//' vulnerability in wpjobportal WP Job Portal wp-job-portal allows PHP Local File Inclusion.This issue affects WP Job Portal: from n/a through = 2.2.8...

CVE-2025-26935

CVE-2025-26935 is a Local File Inclusion vulnerability in WP Job Portal (WordPress plugin) affecting versions &lt;= 2.2.8. It requires authenticated access (Contributor+). Advisory notes an authenticated path traversal that can expose or load server-side files. The entry indicates this vulnerabil...

CVE-2025-26904

CVE-2025-26904 concerns the WordPress plugin WP Responsive Auto Fit Text. According to Wordfence vulnerability data, this entry represents an authenticated, stored cross-site scripting (XSS) vulnerability in WP Responsive Auto Fit Text versions up to 0.2, exploitable via the npc shortcode. The im...

CVE-2025-27348

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Daniel WP Social SEO Booster – Knowledge Graph Social Signals SEO wp-social-seo-booster allows Stored XSS.This issue affects WP Social SEO Booster – Knowledge Graph Social Signals SEO: from n/a...

CVE-2025-27328

Cross-Site Request Forgery CSRF vulnerability in queeez WP-PostRatings Cheater wp-postratings-cheater allows Cross Site Request Forgery.This issue affects WP-PostRatings Cheater: from n/a through = 1.5...

CVE-2025-27323

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Jon Bishop WP About Author wp-about-author allows DOM-Based XSS.This issue affects WP About Author: from n/a through = 1.5...

CVE-2025-27312

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Jenst WP Sitemap wp-sitemap allows SQL Injection.This issue affects WP Sitemap: from n/a through = 1.0...

CVE-2025-27298

Cross-Site Request Forgery CSRF vulnerability in cmstactics WP Video Posts wp-video-posts allows OS Command Injection.This issue affects WP Video Posts: from n/a through = 3.5.1...

CVE-2025-27294

Missing Authorization vulnerability in platcom WP-Asambleas wp-asambleas allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP-Asambleas: from n/a through = 2.85.0...