711
|
- |
|
-
|
-
|
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in falldeaf WP ViewSTL allows DOM-Based XSS.This issue affects WP ViewSTL: from n/a through 1.0.
|
CWE-79
Cross-site Scripting
|
CVE-2025-22742
|
2025-01-16 01:15 |
2025-01-16 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
712
|
- |
|
-
|
-
|
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in TechnoWich WP ULike allows Stored XSS.This issue affects WP ULike: from n/a through 4.7.6.
|
CWE-79
Cross-site Scripting
|
CVE-2025-22738
|
2025-01-16 01:15 |
2025-01-16 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
713
|
- |
|
-
|
-
|
Missing Authorization vulnerability in MagePeople Team WpTravelly allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects WpTravelly: from n/a through 1.8.5.
|
CWE-862
Missing Authorization
|
CVE-2025-22737
|
2025-01-16 01:15 |
2025-01-16 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
714
|
- |
|
-
|
-
|
Incorrect Privilege Assignment vulnerability in WPExperts User Management allows Privilege Escalation.This issue affects User Management: from n/a through 1.2.
|
CWE-266
Incorrect Privilege Assignment
|
CVE-2025-22736
|
2025-01-16 01:15 |
2025-01-16 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
715
|
- |
|
-
|
-
|
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Data443 Posts Footer Manager allows Stored XSS.This issue affects Posts Footer Manager: from n/a …
|
CWE-79
Cross-site Scripting
|
CVE-2025-22734
|
2025-01-16 01:15 |
2025-01-16 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
716
|
- |
|
-
|
-
|
Cross-Site Request Forgery (CSRF) vulnerability in silverplugins217 Build Private Store For Woocommerce allows Cross Site Request Forgery.This issue affects Build Private Store For Woocommerce: from …
|
CWE-352
Origin Validation Error
|
CVE-2025-22731
|
2025-01-16 01:15 |
2025-01-16 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
717
|
- |
|
-
|
-
|
Missing Authorization vulnerability in Infomaniak Staff VOD Infomaniak allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects VOD Infomaniak: from n/a through 1.5.…
|
CWE-862
Missing Authorization
|
CVE-2025-22729
|
2025-01-16 01:15 |
2025-01-16 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
718
|
- |
|
-
|
-
|
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in MojofyWP Product Carousel For WooCommerce – WoorouSell allows Stored XSS.This issue affects Produ…
|
CWE-79
Cross-site Scripting
|
CVE-2025-22724
|
2025-01-16 01:15 |
2025-01-16 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
719
|
- |
|
-
|
-
|
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in NCiphers SEO Bulk Editor allows Stored XSS.This issue affects SEO Bulk Editor: from n/a through 1…
|
CWE-79
Cross-site Scripting
|
CVE-2025-22587
|
2025-01-16 01:15 |
2025-01-16 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
720
|
- |
|
-
|
-
|
Server-Side Request Forgery (SSRF) vulnerability in Faizaan Gagan Course Migration for LearnDash allows Server Side Request Forgery.This issue affects Course Migration for LearnDash: from 1.0.2 throu…
|
CWE-918
Server-Side Request Forgery (SSRF)
|
CVE-2025-22346
|
2025-01-16 01:15 |
2025-01-16 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|