CVE-2024-13114

CVE-2024-13114 relates to the WordPress plugin “WP Projects Portfolio with Client Testimonials” (versions

WordPress WP Finance plugin <= 1.3.6 - Stored XSS via CSRF vulnerability

Stored XSS via CSRF vulnerability discovered by Bob Matyas in WordPress Plugin WP Finance versions = 1.3.6...

WordPress Easy WP Tiles plugin <= 1 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by Pham Van Tam in WordPress Plugin Easy WP Tiles versions = 1...

CVE-2025-24676

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in umangmetatagg Custom WP Store Locator custom-store-locator allows Reflected XSS.This issue affects Custom WP Store Locator: from n/a through = 1.4.7...

CVE-2025-24559

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in brandtoss WP Mailster wp-mailster allows Reflected XSS.This issue affects WP Mailster: from n/a through = 1.8.15.0...

CVE-2025-23819

Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in Marco Milesi WP Cloud cloud allows Absolute Path Traversal.This issue affects WP Cloud: from n/a through = 1.4.3...

CVE-2025-22691

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in WP Travel WP Travel wp-travel allows SQL Injection.This issue affects WP Travel: from n/a through = 10.1.3...

CVE-2025-22684

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Hakan Ozevin WP BASE Booking wp-base-booking-of-appointments-services-and-events allows Stored XSS.This issue affects WP BASE Booking: from n/a through = 5.0.0...

CVE-2025-22691

CVE-2025-22691 is a SQL injection vulnerability in the WordPress plugin WP Travel . The issue arises from improper neutralization of input in SQL commands, affecting versions up to and including 10.1.0 (and referenced advisories extend to 10.1.3). The CVSS-derived base impact in the initial recor...

CVE-2025-22691 WordPress WP Travel plugin <= 10.1.0 - SQL Injection vulnerability

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in WP Travel WP Travel allows SQL Injection. This issue affects WP Travel: from n/a through 10.1.0...

CVE-2025-22691 WordPress WP Travel plugin <= 10.1.3 - SQL Injection vulnerability

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in WP Travel WP Travel wp-travel allows SQL Injection.This issue affects WP Travel: from n/a through = 10.1.3...

CVE-2025-22684 WordPress WP BASE Booking plugin <= 5.0.0 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Hakan Ozevin WP BASE Booking wp-base-booking-of-appointments-services-and-events allows Stored XSS.This issue affects WP BASE Booking: from n/a through = 5.0.0...

CVE-2025-22684 WordPress WP BASE Booking plugin <= 5.0.0 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Hakan Ozevin WP BASE Booking wp-base-booking-of-appointments-services-and-events allows Stored XSS.This issue affects WP BASE Booking: from n/a through = 5.0.0...

CVE-2025-22684

CVE-2025-22684 is a stored XSS in the WordPress plugin “WP BASE Booking of Appointments, Services and Events” (versions up to and including 5.0.0). The vulnerability stems from improper neutralization of input during web page generation, enabling stored cross-site scripting. Affected software and...

CVE-2025-24676

CVE-2025-24676 affects Custom WP Store Locator (

CVE-2025-24676 WordPress Custom WP Store Locator plugin <= 1.4.7 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in umangmetatagg Custom WP Store Locator allows Reflected XSS.This issue affects Custom WP Store Locator: from n/a through 1.4.7...

CVE-2025-24676 WordPress Custom WP Store Locator plugin <= 1.4.7 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in umangmetatagg Custom WP Store Locator custom-store-locator allows Reflected XSS.This issue affects Custom WP Store Locator: from n/a through = 1.4.7...

CVE-2025-24559 WordPress WP Mailster plugin <= 1.8.15.0 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in brandtoss WP Mailster wp-mailster allows Reflected XSS.This issue affects WP Mailster: from n/a through = 1.8.15.0...

CVE-2025-24559

CVE-2025-24559 affects WordPress WP Mailster up to version 1.8.15.0, caused by improper neutralization of input during web page generation, leading to a Reflected XSS. The vulnerability is documented across multiple sources (NVD, Red Hat, CVE listings, PT Security) and lists WP Mailster 1.8.15.0 ...

CVE-2025-24559 WordPress WP Mailster plugin <= 1.8.15.0 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in brandtoss WP Mailster wp-mailster allows Reflected XSS.This issue affects WP Mailster: from n/a through = 1.8.15.0...