Title	CVE ID	CVSS	Vector	Date
Goracash <= 1.1 - Authenticated (Administrator+) Stored Cross-Site Scripting	CVE-2025-53458	4.4	CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:N	September 22, 2025
Magento 2 WordPress Integration <= 1.4.1 - Authenticated (Administrator+) Stored Cross-Site Scripting	CVE-2025-58669	4.4	CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:N	September 22, 2025
eZee Online Hotel Booking Engine <= 1.0.0 - Authenticated (Administrator+) Stored Cross-Site Scripting	CVE-2025-58661	4.4	CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:N	September 22, 2025
Proof Factor – Social Proof Notifications <= 1.0.5 - Authenticated (Administrator+) Stored Cross-Site Scripting	CVE-2025-58658	4.4	CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:N	September 22, 2025
Simple Restaurant Menu <= 1.2 - Authenticated (Administrator+) Stored Cross-Site Scripting	CVE-2025-58647	4.4	CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:N	September 22, 2025
Gravitate Automated Tester <= 1.4.5 - Authenticated (Administrator+) Stored Cross-Site Scripting	CVE-2025-58645	4.4	CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:N	September 22, 2025
Mobi2Go <= 1.0.0 - Authenticated (Administrator+) Stored Cross-Site Scripting	CVE-2025-58646	4.4	CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:N	September 22, 2025
AnyClip Luminous Studio <= 1.3.3 - Authenticated (Administrator+) Stored Cross-Site Scripting	CVE-2025-58271	4.4	CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:N	September 22, 2025
Dialogity Free Live Chat <= 1.0.3 - Authenticated (Administrator+) Stored Cross-Site Scripting	CVE-2025-57912	4.4	CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:N	September 22, 2025
SAPO Feed <= 2.4.2 - Authenticated (Administrator+) Stored Cross-Site Scripting	CVE-2025-53462	4.4	CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:N	September 22, 2025
vipdrv <= 1.0.3 - Authenticated (Administrator+) Stored Cross-Site Scripting	CVE-2025-58884	4.4	CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:N	September 5, 2025
Search Cloud One <= 2.2.5 - Authenticated (Administrator+) Stored Cross-Site Scripting	CVE-2025-58883	4.4	CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:N	September 5, 2025
Instant Locations <= 1.0 - Authenticated (Administrator+) Stored Cross-Site Scripting	CVE-2025-58886	4.4	CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:N	September 5, 2025
WP Thumbtack Review Slider <= 2.6 - Authenticated (Administrator+) Stored Cross-Site Scripting	CVE-2025-58216	4.4	CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:N	August 27, 2025
Goal Tracker for Patreon <= 0.4.6 - Authenticated (Administrator+) Stored Cross-Site Scripting	CVE-2025-48305	4.4	CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:N	August 25, 2025
Mesa Mesa Reservation Widget <= 1.0.0 - Authenticated (Administrator+) Stored Cross-Site Scripting	CVE-2025-48319	4.4	CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:N	August 23, 2025
Advance Food Menu <= 1.0 - Authenticated (Administrator+) Stored Cross-Site Scripting	CVE-2025-48323	4.4	CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:N	August 22, 2025
Pending Order Bot <= 1.0.2 - Authenticated (Administrator+) Stored Cross-Site Scripting	CVE-2025-49892	4.4	CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:N	August 17, 2025
Dropshix <= 4.0.14 - Authenticated (Administrator+) Stored Cross-Site Scripting	CVE-2025-49898	4.4	CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:N	August 15, 2025

Share this researcher's vulnerability discoveries

Did you know Wordfence Intelligence provides free personal and commercial API access to our comprehensive WordPress vulnerability database, along with a free webhook integration to stay on top of the latest vulnerabilities added and updated in the database? Get started today!

Learn more

Want to get notified of the latest vulnerabilities that may affect your WordPress site?
Install Wordfence on your site today to get notified immediately if your site is affected by a vulnerability that has been added to our database.

Get Wordfence

The Wordfence Intelligence WordPress vulnerability database is completely free to access and query via API. Please review the documentation on how to access and consume the vulnerability data via API.

Documentation