6.5

CVSS3.1

CVE-2025-32167 - WordPress SurveyJS plugin <= 1.12.20 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in devsoftbaltic SurveyJS surveyjs allows Stored XSS.This issue affects SurveyJS: from n/a through <= 1.12.20.

πŸ“… Published: April 4, 2025, 3:58 p.m. πŸ”„ Last Modified: April 23, 2026, 3:28 p.m.

6.5

CVSS3.1

CVE-2025-32166 - WordPress Emma for WordPress plugin <= 1.3.3 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in John Housholder Emma for WordPress emma-emarketing-plugin allows Stored XSS.This issue affects Emma for WordPress: from n/a through <= 1.3.3.

πŸ“… Published: April 4, 2025, 3:58 p.m. πŸ”„ Last Modified: April 23, 2026, 3:28 p.m.

6.5

CVSS3.1

CVE-2025-32165 - WordPress Doppler Forms plugin <= 2.5.1 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in fromdoppler Doppler Forms doppler-form allows Stored XSS.This issue affects Doppler Forms: from n/a through <= 2.5.1.

πŸ“… Published: April 4, 2025, 3:58 p.m. πŸ”„ Last Modified: April 23, 2026, 3:28 p.m.

6.5

CVSS3.1

CVE-2025-32163 - WordPress Xpro Elementor Addons plugin <= 1.4.10 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Xpro Xpro Elementor Addons xpro-elementor-addons allows Stored XSS.This issue affects Xpro Elementor Addons: from n/a through <= 1.4.10.

πŸ“… Published: April 4, 2025, 3:58 p.m. πŸ”„ Last Modified: April 23, 2026, 3:28 p.m.

6.5

CVSS3.1

CVE-2025-32162 - WordPress Chamber Dashboard Business Directory plugin <= 3.3.11 - Cross Site Scripting (XSS) vulner…

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Morgan Kay Chamber Dashboard Business Directory chamber-dashboard-business-directory allows DOM-Based XSS.This issue affects Chamber Dashboard Business Directory: from n/a through <= 3.3.11.

πŸ“… Published: April 4, 2025, 3:58 p.m. πŸ”„ Last Modified: April 23, 2026, 3:28 p.m.

6.5

CVSS3.1

CVE-2025-32161 - WordPress Arkhe Blocks plugin <= 2.27.1 - Cross Site Scripting (XSS) Vulnerability

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Ryo Arkhe Blocks arkhe-blocks allows Stored XSS.This issue affects Arkhe Blocks: from n/a through <= 2.27.1.

πŸ“… Published: April 4, 2025, 3:58 p.m. πŸ”„ Last Modified: April 23, 2026, 3:28 p.m.

7.5

CVSS3.1

CVE-2025-32159 - WordPress Radius Blocks plugin <= 2.2.1 - Local File Inclusion vulnerability

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in RadiusTheme Radius Blocks radius-blocks allows PHP Local File Inclusion.This issue affects Radius Blocks: from n/a through <= 2.2.1.

πŸ“… Published: April 4, 2025, 3:58 p.m. πŸ”„ Last Modified: April 23, 2026, 3:28 p.m.

7.5

CVSS3.1

CVE-2025-32157 - WordPress Sparkle Elementor Kit plugin <= 2.0.9 - Local File Inclusion vulnerability

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Jakub Glos Sparkle Elementor Kit sparkle-elementor-kit allows PHP Local File Inclusion.This issue affects Sparkle Elementor Kit: from n/a through <= 2.0.9.

πŸ“… Published: April 4, 2025, 3:58 p.m. πŸ”„ Last Modified: April 23, 2026, 3:28 p.m.

7.5

CVSS3.1

CVE-2025-32156 - WordPress Just Post Preview Widget plugin <= 1.1.1 - Local File Inclusion vulnerability

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Alex Prokopenko / JustCoded Just Post Preview Widget just-post-preview allows PHP Local File Inclusion.This issue affects Just Post Preview Widget: from n/a through <= 1.1.1.

πŸ“… Published: April 4, 2025, 3:58 p.m. πŸ”„ Last Modified: April 23, 2026, 3:28 p.m.

7.5

CVSS3.1

CVE-2025-32155 - WordPress Beds24 Online Booking plugin <= 2.0.28 - Local File Inclusion vulnerability

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in markkinchin Beds24 Online Booking beds24-online-booking allows PHP Local File Inclusion.This issue affects Beds24 Online Booking: from n/a through <= 2.0.28.

πŸ“… Published: April 4, 2025, 3:58 p.m. πŸ”„ Last Modified: April 23, 2026, 3:28 p.m.
Total resulsts: 346661
Page 5762 of 34,667
Β« previous page Β» next page
Filters