7.1

CVSS3.1

CVE-2025-52739 - WordPress Sala theme <= 1.1.3 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in uxper Sala allows Reflected XSS.This issue affects Sala: from n/a through 1.1.3.

๐Ÿ“… Published: Dec. 31, 2025, 8:10 p.m. ๐Ÿ”„ Last Modified: Jan. 20, 2026, 3:16 p.m.

0.0

CVE-2025-50053 - WordPress Blappsta Mobile App Plugin โ€“ Your native, mobile iPhone App and Android App Plugin <= 0.8โ€ฆ

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in nebelhorn Blappsta Mobile App Plugin &#8211; Your native, mobile iPhone App and Android App yournewsapp allows Reflected XSS.This issue affects Blappsta Mobile App Plugin &#8211; Your native, mobilโ€ฆ

๐Ÿ“… Published: Dec. 31, 2025, 8:09 p.m. ๐Ÿ”„ Last Modified: April 1, 2026, 5:25 p.m.

7.1

CVSS3.1

CVE-2025-47566 - WordPress ZoomSounds plugin <= 6.91 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in ZoomSounds allows Reflected XSS.This issue affects ZoomSounds: from n/a through 6.91.

๐Ÿ“… Published: Dec. 31, 2025, 8:07 p.m. ๐Ÿ”„ Last Modified: Jan. 20, 2026, 3:16 p.m.

7.1

CVSS3.1

CVE-2025-31054 - WordPress Bloggie theme <= 2.0.8 - Cross Site Scripting (XSS) Vulnerability

Cross-Site Request Forgery (CSRF) vulnerability in Themefy Bloggie allows Reflected XSS.This issue affects Bloggie: from n/a through 2.0.8.

๐Ÿ“… Published: Dec. 31, 2025, 8:05 p.m. ๐Ÿ”„ Last Modified: Jan. 20, 2026, 3:16 p.m.

8.5

CVSS3.1

CVE-2025-30628 - WordPress Amazon Affiliates Addon for WPBakery Page Builder (formerly Visual Composer) plugin <= 1.โ€ฆ

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in AA-Team Amazon Affiliates Addon for WPBakery Page Builder (formerly Visual Composer) allows SQL Injection.This issue affects Amazon Affiliates Addon for WPBakery Page Builder (formerly Visual Compoโ€ฆ

๐Ÿ“… Published: Dec. 31, 2025, 8:03 p.m. ๐Ÿ”„ Last Modified: Jan. 20, 2026, 3:16 p.m.

6.5

CVSS3.1

CVE-2025-28973 - WordPress Pro Bulk Watermark Plugin for WordPress <= 2.0 - Path Traversal Vulnerability

Path Traversal: '.../...//' vulnerability in AA-Team Pro Bulk Watermark Plugin for WordPress allows Path Traversal.This issue affects Pro Bulk Watermark Plugin for WordPress: from n/a through 2.0.

๐Ÿ“… Published: Dec. 31, 2025, 8:02 p.m. ๐Ÿ”„ Last Modified: Jan. 20, 2026, 3:16 p.m.

8.5

CVSS3.1

CVE-2025-28949 - WordPress Mediabay - WordPress Media Library Folders <= 1.4 - SQL Injection Vulnerability

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Codedraft Mediabay - WordPress Media Library Folders allows Blind SQL Injection.This issue affects Mediabay - WordPress Media Library Folders: from n/a through 1.4.

๐Ÿ“… Published: Dec. 31, 2025, 8 p.m. ๐Ÿ”„ Last Modified: Jan. 20, 2026, 3:16 p.m.

0.0

CVE-2025-23757 - WordPress ZD Scribd iPaper plugin <= 1.0 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Proloy Chakroborty ZD Scribd iPaper zd-scribd-ipaper allows Reflected XSS.This issue affects ZD Scribd iPaper: from n/a through <= 1.0.

๐Ÿ“… Published: Dec. 31, 2025, 7:58 p.m. ๐Ÿ”„ Last Modified: April 1, 2026, 5:17 p.m.

0.0

CVE-2025-23719 - WordPress ZhinaTwitterWidget plugin <= 1.0 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in zckevin ZhinaTwitterWidget zhina-twitter-widget allows Reflected XSS.This issue affects ZhinaTwitterWidget: from n/a through <= 1.0.

๐Ÿ“… Published: Dec. 31, 2025, 7:57 p.m. ๐Ÿ”„ Last Modified: April 1, 2026, 5:16 p.m.

0.0

CVE-2025-23707 - WordPress En Masse plugin <= 1.0 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Matamko En Masse en-masse-wp allows Reflected XSS.This issue affects En Masse: from n/a through <= 1.0.

๐Ÿ“… Published: Dec. 31, 2025, 7:56 p.m. ๐Ÿ”„ Last Modified: April 1, 2026, 4:23 p.m.
Total resulsts: 343968
Page 1797 of 34,397
ยซ previous page ยป next page
Filters