Threat Entry Updated 2025-09-05

CVE-2025-58855 - Allows Reflected Xss Plugin

Improper Neutralization of Formula Elements in a CSV File vulnerability in Denis V (Artprima) AP HoneyPot WordPress Plugin allows Reflected XSS. This issue affects AP HoneyPot WordPress Plugin: from n/a through 1.4.

PLUGIN Allows Reflected Xss

CVE-2025-58855

HIGH CVSS 7.1 2025-09-05

Risk Score

Open Full Technical Breakdown

Threat Entry Updated 2025-07-08

CVE-2025-32311 - Allows Reflected Xss Theme

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in QuanticaLabs Pressroom - News Magazine WordPress Theme allows Reflected XSS. This issue affects Pressroom - News Magazine WordPress Theme: from n/a through 6.9.

THEME Allows Reflected Xss

CVE-2025-32311

HIGH CVSS 7.1 2025-07-04

Risk Score

Open Full Technical Breakdown

Threat Entry Updated 2025-04-07

CVE-2025-22282 - Allows Reflected Xss Plugin

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in EPC ez Form Calculator - WordPress plugin allows Reflected XSS.This issue affects ez Form Calculator - WordPress plugin: from n/a through 2.14.1.2.

PLUGIN Allows Reflected Xss

CVE-2025-22282

HIGH CVSS 7.1 2025-04-04

Risk Score

Open Full Technical Breakdown

Threat Entry Updated 2025-01-31

CVE-2025-24563 - Allows Reflected Xss Plugin

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in ThemeGlow Cleanup – Directory Listing & Classifieds WordPress Plugin allows Reflected XSS. This issue affects Cleanup – Directory Listing & Classifieds WordPress Plugin: from n/a through 1.0.4.

PLUGIN Allows Reflected Xss

CVE-2025-24563

HIGH CVSS 7.1 2025-01-31

Risk Score

Open Full Technical Breakdown

Threat Entry Updated 2024-11-21

CVE-2024-32694 - Allows Reflected Xss Plugin

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Creative interactive media 3D FlipBook, PDF Viewer, PDF Embedder – Real 3D FlipBook WordPress Plugin allows Reflected XSS.This issue affects 3D FlipBook, PDF Viewer, PDF Embedder – Real 3D FlipBook WordPress Plugin: from n/a through 3.62.

PLUGIN Allows Reflected Xss

CVE-2024-32694

HIGH CVSS 7.1 2024-04-22

Risk Score

Open Full Technical Breakdown

Threat Entry Updated 2024-11-21

CVE-2024-24927 - Allows Reflected Xss Theme

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in UnitedThemes Brooklyn | Creative Multi-Purpose Responsive WordPress Theme allows Reflected XSS.This issue affects Brooklyn | Creative Multi-Purpose Responsive WordPress Theme: from n/a through 4.9.7.6.

THEME Allows Reflected Xss

CVE-2024-24927

HIGH CVSS 7.1 2024-02-12

Risk Score

Open Full Technical Breakdown

Threat Entry Updated 2024-11-21

CVE-2023-50892 - Allows Reflected Xss Theme

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in CodexThemes TheGem - Creative Multi-Purpose & WooCommerce WordPress Theme allows Reflected XSS.This issue affects TheGem - Creative Multi-Purpose & WooCommerce WordPress Theme: from n/a through 5.9.1.

THEME Allows Reflected Xss

CVE-2023-50892

HIGH CVSS 7.1 2023-12-29

Risk Score

Open Full Technical Breakdown

Threat Entry Updated 2024-11-21

CVE-2023-51501 - Allows Reflected Xss Theme

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Undsgn Uncode - Creative & WooCommerce WordPress Theme allows Reflected XSS.This issue affects Uncode - Creative & WooCommerce WordPress Theme: from n/a through 2.8.6.

THEME Allows Reflected Xss

CVE-2023-51501

HIGH CVSS 7.1 2023-12-28

Risk Score

Open Full Technical Breakdown

Threat Entry Updated 2024-11-21

CVE-2023-49187 - Allows Reflected Xss Theme

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Spoonthemes Adifier - Classified Ads WordPress Theme allows Reflected XSS.This issue affects Adifier - Classified Ads WordPress Theme: from n/a before 3.1.4.

THEME Allows Reflected Xss

CVE-2023-49187

HIGH CVSS 7.1 2023-12-15

Risk Score

Open Full Technical Breakdown

Threat Entry Updated 2024-11-21

CVE-2023-49827 - Allows Reflected Xss Theme

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in PenciDesign Soledad – Multipurpose, Newspaper, Blog & WooCommerce WordPress Theme allows Reflected XSS.This issue affects Soledad – Multipurpose, Newspaper, Blog & WooCommerce WordPress Theme: from n/a through 8.4.1.

THEME Allows Reflected Xss

CVE-2023-49827

HIGH CVSS 7.1 2023-12-14

Risk Score

Open Full Technical Breakdown