EUVD-2026-92632

Ghost: Stored XSS via Embed Card Previews...

NPM: Ghost: Stored XSS via Embed Card Previews

NPM: Ghost: Stored XSS via Embed Card Previews vulnerability discovered by ? in WordPress Npm ghost versions = 6.34.0, 6.67.0...

NPM: Ghost : Stored XSS via SVG Files in Content Imports

NPM: Ghost : Stored XSS via SVG Files in Content Imports vulnerability discovered by ? in WordPress Npm ghost versions = 4.0.0, 6.67.0...

NPM: Ghost: Stored XSS via SVG Uploads Bypassing Sanitization

NPM: Ghost: Stored XSS via SVG Uploads Bypassing Sanitization vulnerability discovered by ? in WordPress Npm ghost versions = 4.22.0, 6.65.0...

EUVD-2026-93508

Payload: Bypassed sanitization of user uploaded SVGs...

EUVD-2026-93514

Payload: Uploaded XML files could execute same-origin JavaScript...

EUVD-2026-92760

Ghost: Stored XSS via oEmbed Photo Responses...

NPM: Ghost: Stored XSS via oEmbed Photo Responses

NPM: Ghost: Stored XSS via oEmbed Photo Responses vulnerability discovered by ? in WordPress Npm ghost versions = 2.5.0, 6.64.0...

NPM: Ghost: Stored XSS via Bookmark Card Images

NPM: Ghost: Stored XSS via Bookmark Card Images vulnerability discovered by ? in WordPress Npm ghost versions = 5.94.0, 6.64.0...

NPM: Ghost: Stored XSS via File Uploads on Local Storage

NPM: Ghost: Stored XSS via File Uploads on Local Storage vulnerability discovered by ? in WordPress Npm ghost versions = 6.22.1, 6.64.0...

WordPress Aurora Heatmap plugin <= 1.7.2 - Unauthenticated Stored Cross-Site Scripting vulnerability

Unauthenticated Stored Cross-Site Scripting vulnerability discovered by lhking in WordPress Plugin Aurora Heatmap versions = 1.7.2...

CVE-2026-95595

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Fontsplugin Disable and Remove Google Fonts | GDPR & DSGVO friendly disable-remove-google-fonts allows Reflected XSS. This issue affects Disable and Remove Google Fonts | GDPR & DSGVO friendly: fro...

CVE-2026-94670

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Everest Forms allows Reflected XSS. This issue affects Everest Forms: from n/a through 3.6.1...

CVE-2026-94662

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Unlimited Elements Unlimited Elements For Elementor Free Widgets, Addons, Templates allows Stored XSS. This issue affects Unlimited Elements For Elementor Free Widgets, Addons, Templates: from n/a...

CVE-2026-95595 WordPress Disable and Remove Google Fonts | GDPR & DSGVO friendly plugin <= 2.0.2 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Fontsplugin Disable and Remove Google Fonts | GDPR & DSGVO friendly disable-remove-google-fonts allows Reflected XSS. This issue affects Disable and Remove Google Fonts | GDPR & DSGVO friendly: fro...

CVE-2026-95595

The Disable and Remove Google Fonts | GDPR & DSGVO friendly WordPress plugin (versions

EUVD-2026-94489

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Fontsplugin Disable and Remove Google Fonts | GDPR & DSGVO friendly disable-remove-google-fonts allows Reflected XSS. This issue affects Disable and Remove Google Fonts | GDPR & DSGVO friendly: fro...

CVE-2026-94670

The Everest Forms WordPress plugin (versions

EUVD-2026-94487

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Everest Forms allows Reflected XSS. This issue affects Everest Forms: from n/a through 3.6.1...

CVE-2026-94670 WordPress Everest Forms plugin <= 3.6.1 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Everest Forms allows Reflected XSS. This issue affects Everest Forms: from n/a through 3.6.1...