VYPR

CVEs

131,068 total · page 1069 of 2,622

AllCriticalHighKEV
  • CVE-2025-23552HigMar 3, 2025
    WordPress
    Texteller
    risk 0.46cvss 7.1epss 0.00

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Yashar Texteller texteller allows Reflected XSS.This issue affects Texteller: from n/a through <= 1.3.0.

  • CVE-2025-23549HigMar 3, 2025
    WordPress
    Maniac Seo
    risk 0.46cvss 7.1epss 0.00

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in agora32 Maniac SEO maniac-seo allows Reflected XSS.This issue affects Maniac SEO: from n/a through <= 2.0.

  • CVE-2025-23539HigMar 3, 2025
    WordPress
    Awesome Hooks
    risk 0.46cvss 7.1epss 0.00

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in surror Awesome Hooks awesome-hooks allows Reflected XSS.This issue affects Awesome Hooks: from n/a through <= 1.0.1.

  • CVE-2025-23538HigMar 3, 2025
    WordPress
    Wp Contest
    risk 0.46cvss 7.1epss 0.00

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Sophia M Williams WP Contest wp-contest allows Reflected XSS.This issue affects WP Contest: from n/a through <= 1.0.0.

  • CVE-2025-23536HigMar 3, 2025
    WordPress
    Track Page Scroll
    risk 0.46cvss 7.1epss 0.00

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in mndpsingh287 Track Page Scroll track-page-scroll allows Reflected XSS.This issue affects Track Page Scroll: from n/a through <= 1.0.2.

  • CVE-2025-23526HigMar 3, 2025
    Swiftcloud
    Swift Calendar Online Appointment Scheduling
    risk 0.46cvss 7.1epss 0.00

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in SwiftCloud Swift Calendar Online Appointment Scheduling online-appointment-scheduling-software allows Reflected XSS.This issue affects Swift Calendar Online Appointment…

  • CVE-2025-23524HigMar 3, 2025
    dactum
    mycbgenie-clickbank-storefront
    risk 0.46cvss 7.1epss 0.00

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in dactum ClickBank Storefront mycbgenie-clickbank-storefront allows Reflected XSS.This issue affects ClickBank Storefront: from n/a through <= 1.7.

  • CVE-2025-23521HigMar 3, 2025
    Goodlayers
    Goodlayers Blocks
    risk 0.46cvss 7.1epss 0.00

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in GoodLayers Goodlayers Blocks goodlayers-blocks allows Reflected XSS.This issue affects Goodlayers Blocks: from n/a through <= 1.0.1.

  • CVE-2025-23520HigMar 3, 2025
    Heartland
    Heartland Management Terminal
    risk 0.46cvss 7.1epss 0.00

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in SecureSubmit Heartland Management Terminal allows Reflected XSS. This issue affects Heartland Management Terminal: from n/a through 1.3.0.

  • CVE-2025-23519HigMar 3, 2025
    WordPress
    Gwebpro Store Locator
    risk 0.46cvss 7.1epss 0.00

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Jas Saran G Web Pro Store Locator gwebpro-store-locator allows Reflected XSS.This issue affects G Web Pro Store Locator: from n/a through <= 2.0.1.

  • CVE-2025-23518HigMar 3, 2025
    WordPress
    Googlemapper 2
    risk 0.46cvss 7.1epss 0.00

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in mrsaucier GoogleMapper googlemapper-2 allows Reflected XSS.This issue affects GoogleMapper: from n/a through <= 2.0.3.

  • CVE-2025-23517HigMar 3, 2025
    WordPress
    Google Map On Postpage
    risk 0.46cvss 7.1epss 0.00

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in sunil chaulagain Google Map on Post/Page google-map-on-postpage allows Reflected XSS.This issue affects Google Map on Post/Page: from n/a through <= 1.1.

  • CVE-2025-23516HigMar 3, 2025
    WordPress
    Sale with Razorpay
    risk 0.46cvss 7.1epss 0.00

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in brainvireinfo Sale with Razorpay sell-with-razorpay allows Reflected XSS.This issue affects Sale with Razorpay: from n/a through <= 1.0.

  • CVE-2025-23505HigMar 3, 2025
    WordPress
    Pit Login Welcome
    risk 0.46cvss 7.1epss 0.00

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Pantho Bihosh Pit Login Welcome pit-login-welcome allows Reflected XSS.This issue affects Pit Login Welcome: from n/a through <= 1.1.5.

  • CVE-2025-23502HigMar 3, 2025
    WordPress
    curated-search
    risk 0.46cvss 7.1epss 0.00

    Cross-Site Request Forgery (CSRF) vulnerability in Ned Curated Search curated-search allows Stored XSS.This issue affects Curated Search: from n/a through <= 1.2.

  • CVE-2025-23496HigMar 3, 2025
    WordPress
    Wp Fpo
    risk 0.46cvss 7.1epss 0.00

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in husani WP FPO wp-fpo allows Reflected XSS.This issue affects WP FPO: from n/a through <= 1.0.

  • CVE-2025-23494HigMar 3, 2025
    Binnyva
    Quizzin
    risk 0.46cvss 7.1epss 0.00

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in binnyva Quizzin quizzin allows Reflected XSS.This issue affects Quizzin: from n/a through <= 1.01.4.

  • CVE-2025-23493HigMar 3, 2025
    WordPress
    Google Transliteration
    risk 0.46cvss 7.1epss 0.00

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in moallemi Google Transliteration google-transliteration allows Reflected XSS.This issue affects Google Transliteration: from n/a through <= 1.7.2.

  • CVE-2025-23490HigMar 3, 2025
    WordPress
    Browser-Update-Notify
    risk 0.46cvss 7.1epss 0.00

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Michael Stursberg Browser-Update-Notify browser-update-notify allows Reflected XSS.This issue affects Browser-Update-Notify: from n/a through <= 0.2.1.

  • CVE-2025-23488HigMar 3, 2025
    WordPress
    Rng Refresh
    risk 0.46cvss 7.1epss 0.00

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Abolfazl Sabagh rng-refresh rng-refresh allows Reflected XSS.This issue affects rng-refresh: from n/a through <= 1.0.

  • CVE-2025-23487HigMar 3, 2025
    WordPress
    Easy Gallery
    risk 0.46cvss 7.1epss 0.00

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in odihost Easy Gallery simple-gallery-odihost allows Reflected XSS.This issue affects Easy Gallery: from n/a through <= 1.4.

  • CVE-2025-23485HigMar 3, 2025
    WordPress
    Rs Survey
    risk 0.46cvss 7.1epss 0.00

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in richestsoft RS Survey rs-survey allows Reflected XSS.This issue affects RS Survey: from n/a through <= 1.0.

  • CVE-2025-23484HigMar 3, 2025
    WordPress
    Predict When
    risk 0.46cvss 7.1epss 0.00

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Cojecto Predict When predict-when allows Reflected XSS.This issue affects Predict When: from n/a through <= 1.3.

  • CVE-2025-23482HigMar 3, 2025
    WordPress
    Azurecurve Floating Featured Image
    risk 0.46cvss 7.1epss 0.00

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in azurecurve azurecurve Floating Featured Image azurecurve-floating-featured-image allows Reflected XSS.This issue affects azurecurve Floating Featured Image: from n/a through <=…

  • CVE-2025-23481HigMar 3, 2025
    WordPress
    Ni Woocommerce Sales Report Email
    risk 0.46cvss 7.1epss 0.00

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Anzar Ahmed Ni WooCommerce Sales Report Email ni-woocommerce-sales-report-email allows Reflected XSS.This issue affects Ni WooCommerce Sales Report Email: from n/a through <=…

  • CVE-2025-23479HigMar 3, 2025
    WordPress
    Melascrivi
    risk 0.46cvss 7.1epss 0.00

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in melascrivi melascrivi melascrivi allows Reflected XSS.This issue affects melascrivi: from n/a through <= 1.4.

  • CVE-2025-23478HigMar 3, 2025
    WordPress
    Photo Video Store
    risk 0.46cvss 7.1epss 0.00

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in cmsaccount Photo Video Store photo-video-store allows Reflected XSS.This issue affects Photo Video Store: from n/a through <= 21.07.

  • CVE-2025-23473HigMar 3, 2025
    WordPress
    Killer Theme Options
    risk 0.46cvss 7.1epss 0.00

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Punit Bhalodiya Killer Theme Options killer-theme-options allows Reflected XSS.This issue affects Killer Theme Options: from n/a through <= 2.0.

  • CVE-2025-23472HigMar 3, 2025
    WordPress
    Flexoslider
    risk 0.46cvss 7.1epss 0.00

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in flexostudio Flexo Slider flexo-slider allows Reflected XSS.This issue affects Flexo Slider: from n/a through <= 1.0013.

  • CVE-2025-23468HigMar 3, 2025
    WordPress
    Essay Wizard Wpcres
    risk 0.46cvss 7.1epss 0.00

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in wrenchpilot Essay Wizard (wpCRES) essay-wizard-wpcres allows Reflected XSS.This issue affects Essay Wizard (wpCRES): from n/a through <= 1.0.6.4.

  • CVE-2025-23465HigMar 3, 2025
    WordPress
    Vampire Character Manager
    risk 0.46cvss 7.1epss 0.00

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in magent Vampire Character Manager vampire-character allows Reflected XSS.This issue affects Vampire Character Manager: from n/a through <= 2.13.

  • CVE-2025-23464HigMar 3, 2025
    WordPress
    Twitter News Feed
    risk 0.46cvss 7.1epss 0.00

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Keir Whitaker Twitter News Feed twitter-news-feed allows Reflected XSS.This issue affects Twitter News Feed: from n/a through <= 1.1.1.

  • CVE-2025-23451HigMar 3, 2025
    WordPress
    Awesome Twitter Feeds
    risk 0.46cvss 7.1epss 0.00

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in titodevera Awesome Twitter Feeds awesome-twitter-feeds allows Reflected XSS.This issue affects Awesome Twitter Feeds: from n/a through <= 1.0.

  • CVE-2025-23450HigMar 3, 2025
    WordPress
    Aw Woocommerce Kode Pembayaran
    risk 0.46cvss 7.1epss 0.00

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in agenwebsite AW WooCommerce Kode Pembayaran aw-woocommerce-kode-pembayaran allows Reflected XSS.This issue affects AW WooCommerce Kode Pembayaran: from n/a through <= 1.1.4.

  • CVE-2025-23447HigMar 3, 2025
    WordPress
    Smooth Dynamic Slider
    risk 0.46cvss 7.1epss 0.00

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Kundan Yevale Smooth Dynamic Slider smooth-dynamic-slider allows Reflected XSS.This issue affects Smooth Dynamic Slider: from n/a through <= 1.0.

  • CVE-2025-23446HigMar 3, 2025
    WordPress
    Wp Spacecontent
    risk 0.46cvss 7.1epss 0.00

    Cross-Site Request Forgery (CSRF) vulnerability in KokoenDE WP SpaceContent wp-spacecontent allows Stored XSS.This issue affects WP SpaceContent: from n/a through <= 0.4.5.

  • CVE-2025-23441HigMar 3, 2025
    WordPress
    Attach Gallery Posts
    risk 0.46cvss 7.1epss 0.00

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in dkukral Attach Gallery Posts attach-gallery-posts allows Reflected XSS.This issue affects Attach Gallery Posts: from n/a through <= 1.6.

  • CVE-2025-23439HigMar 3, 2025
    WordPress
    Tinymce Extended Config
    risk 0.46cvss 7.1epss 0.00

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in willshouse TinyMCE Extended Config tinymce-extended-config allows Reflected XSS.This issue affects TinyMCE Extended Config: from n/a through <= 0.1.0.

  • CVE-2025-23437HigMar 3, 2025
    nord_tramper
    ntp-header-images
    risk 0.46cvss 7.1epss 0.00

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in nord_tramper ntp-header-images header-images-rotator allows Reflected XSS.This issue affects ntp-header-images: from n/a through <= 1.2.

  • CVE-2025-23433HigMar 3, 2025
    WordPress
    Vcos
    risk 0.46cvss 7.1epss 0.00

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in jnwry vcOS vcos allows Reflected XSS.This issue affects vcOS: from n/a through <= 1.4.0.

  • CVE-2025-23425HigMar 3, 2025
    WordPress
    Marekkis Watermark
    risk 0.46cvss 7.1epss 0.00

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in marekki Marekkis Watermark marekkis-watermark allows Reflected XSS.This issue affects Marekkis Watermark: from n/a through <= 0.9.4.

  • CVE-2025-21424HigMar 3, 2025
    Qualcomm
    NPU driver
    risk 0.51cvss 7.8epss 0.00

    Memory corruption while calling the NPU driver APIs concurrently.

  • CVE-2025-0475HigMar 3, 2025
    GitLab Inc.
    GitLab
    risk 0.57cvss 8.7epss 0.01

    An issue has been discovered in GitLab CE/EE affecting all versions from 15.10 prior to 17.7.6, 17.8 prior to 17.8.4, and 17.9 prior to 17.9.1. A proxy feature could potentially allow unintended content rendering leading to XSS under specific circumstances.

  • CVE-2024-53034HigMar 3, 2025
    Qualcomm
    Kernel Mode CPU event and sync object handle
    risk 0.51cvss 7.8epss 0.00

    Memory corruption occurs during an Escape call if an invalid Kernel Mode CPU event and sync object handle are passed with the DriverKnownEscape flag reset.

  • CVE-2024-53033HigMar 3, 2025
    Qualcomm
    kernel
    risk 0.51cvss 7.8epss 0.00

    Memory corruption while doing Escape call when user provides valid kernel address in the place of valid user buffer address.

  • CVE-2024-53032HigMar 3, 2025
    Qualcomm
    keyboard virtual device
    risk 0.51cvss 7.8epss 0.00

    Memory corruption may occur in keyboard virtual device due to guest VM interaction.

  • CVE-2024-53031HigMar 3, 2025
    Qualcomm
    Srv1l Firmware
    risk 0.51cvss 7.8epss 0.00

    Memory corruption while reading a type value from a buffer controlled by the Guest Virtual Machine.

  • CVE-2024-53030HigMar 3, 2025
    Qualcomm
    FE driver
    risk 0.51cvss 7.8epss 0.00

    Memory corruption while processing input message passed from FE driver.

  • CVE-2024-53029HigMar 3, 2025
    Qualcomm
    Srv1l Firmware
    risk 0.51cvss 7.8epss 0.00

    Memory corruption while reading a value from a buffer controlled by the Guest Virtual Machine.

  • CVE-2024-53028HigMar 3, 2025
    Qualcomm
    Srv1l Firmware
    risk 0.51cvss 7.8epss 0.00

    Memory corruption may occur while processing message from frontend during allocation.