CVE-2025-23926 WordPress Ajax WP Query Search Filter plugin <= 1.0.7 - Stored Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in TC.K Ajax WP Query Search Filter ajax-wp-query-search-filter allows Stored XSS.This issue affects Ajax WP Query Search Filter: from n/a through = 1.0.7...

CVE-2025-23876 WordPress WP krpano plugin <= 1.2.1 - Stored Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in No-Nonsense WP krpano wp-krpano allows Stored XSS.This issue affects WP krpano: from n/a through = 1.2.1...

CVE-2025-23821

CVE-2025-23821 is a CSRF vulnerability in the WordPress plugin WP Cookies Alert (Aleapp WP Cookies Alert). The entry notes CSRF as the issue and that it affects the plugin from unknown/NA through version 1.1.1. The Red Hat CVE entry confirms the same description. The document provides CVSS 3.1 me...

CVE-2025-23821 WordPress WP Cookies Alert plugin <= 1.1.1 - CSRF to Stored XSS vulnerability

Cross-Site Request Forgery CSRF vulnerability in aleapp WP Cookies Alert wp-cookies-alert allows Cross Site Request Forgery.This issue affects WP Cookies Alert: from n/a through = 1.1.1...

CVE-2025-23821 WordPress WP Cookies Alert plugin <= 1.1.1 - CSRF to Stored XSS vulnerability

Cross-Site Request Forgery CSRF vulnerability in aleapp WP Cookies Alert wp-cookies-alert allows Cross Site Request Forgery.This issue affects WP Cookies Alert: from n/a through = 1.1.1...

CVE-2025-23804

CVE-2025-23804 is a CSRF vulnerability in the WordPress plugin WP Service Payment Form With Authorize.net that can enable a Reflected XSS . The Red Hat advisory reiterates the same CVE and describes the flaw as CSRF affecting the plugin up to version 2.6.0 . The base metrics list a CVSS v3.1 scor...

CVE-2025-23797 WordPress WP Options Editor plugin <= 1.1 - CSRF to Privilege Escalation vulnerability

Cross-Site Request Forgery CSRF vulnerability in Mike Selander WP Options Editor wp-options-editor allows Privilege Escalation.This issue affects WP Options Editor: from n/a through = 1.1...

CVE-2025-23802 WordPress WP-Revive Adserver Plugin <= 2.2.1 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in SteveSoehl WP-Revive Adserver wp-revive-adserver allows Stored XSS.This issue affects WP-Revive Adserver: from n/a through = 2.2.1...

CVE-2025-23802

CVE-2025-23802 is a stored XSS in WP-Revive Adserver (WordPress plugin) caused by improper neutralization of input during web page generation. Affected: WP-Revive Adserver versions

CVE-2025-23802 WordPress WP-Revive Adserver Plugin <= 2.2.1 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in SteveSoehl WP-Revive Adserver wp-revive-adserver allows Stored XSS.This issue affects WP-Revive Adserver: from n/a through = 2.2.1...

CVE-2025-23698 WordPress WP Custom Google Search plugin <= 1.0 - CSRF to Stored XSS vulnerability

Cross-Site Request Forgery CSRF vulnerability in ivanra10 WP Custom Google Search wp-custom-google-search allows Stored XSS.This issue affects WP Custom Google Search: from n/a through = 1.0...

CVE-2025-23698

CVE-2025-23698 describes a CSRF weakness in the WordPress plugin “WP Custom Google Search” that enables stored XSS. Public details confirm the vulnerability affects WP Custom Google Search versions up to 1.0 (no exact fixed version provided in the sources). The issue stems from cross-site request...

CVE-2025-23662

CVE-2025-23662 describes a Cross-Site Request Forgery (CSRF) vulnerability in the WordPress plugin WP Panoramio that enables Stored Cross-Site Scripting (XSS). Affected versions are listed as

CVE-2025-23662 WordPress WP Panoramio plugin <= 1.5.0 - CSRF to Cross-Site Scripting vulnerability

Cross-Site Request Forgery CSRF vulnerability in ryscript WP Panoramio wp-panoramio allows Stored XSS.This issue affects WP Panoramio: from n/a through = 1.5.0...

CVE-2025-23573 WordPress WP Background Tile plugin <= 1.0 - CSRF to Stored XSS vulnerability

Cross-Site Request Forgery CSRF vulnerability in sammyb WP Background Tile wp-background-tile allows Stored XSS.This issue affects WP Background Tile: from n/a through = 1.0...

CVE-2025-23573

CVE-2025-23573 is a Cross-Site Request Forgery (CSRF) vulnerability in the WP Background Tile plugin that allows Stored XSS. Affected: WP Background Tile from n/a through version 1.0. Red Hat and other connected documents corroborate the CSRF-to-Stored-XSS nature but do not provide additional tec...

CVE-2025-23511 WordPress WP-BlackCheck plugin <= 2.7.2 - CSRF to Stored Cross Site Scripting (XSS) vulnerability

Cross-Site Request Forgery CSRF vulnerability in Stargazer WP-BlackCheck wp-blackcheck allows Stored XSS.This issue affects WP-BlackCheck: from n/a through = 2.7.2...

CVE-2025-23511

CVE-2025-23511: Cross-Site Request Forgery in the WP-BlackCheck (Viktoria Rei Bauer) WordPress plugin enables Stored XSS for WP-BlackCheck versions up to 2.7.2. CVSS v3.1 base score 7.1 (HIGH); exploitability requires user interaction. Public references cite the vulnerability details; remediation...

CVE-2025-23511 WordPress WP-BlackCheck plugin <= 2.7.2 - CSRF to Stored Cross Site Scripting (XSS) vulnerability

Cross-Site Request Forgery CSRF vulnerability in Stargazer WP-BlackCheck wp-blackcheck allows Stored XSS.This issue affects WP-BlackCheck: from n/a through = 2.7.2...

CVE-2025-23533 WordPress WP Lyrics plugin <= 0.4.1 - CSRF to Stored XSS vulnerability

Cross-Site Request Forgery CSRF vulnerability in Adrian Moreno WP Lyrics allows Stored XSS.This issue affects WP Lyrics: from n/a through 0.4.1...