EUVD-2026-60784

Unauthenticated Cross Site Scripting XSS in Chaty Pro = 3.5.8 versions...

CVE-2026-73359

Subscriber Cross Site Scripting XSS in WP Cookie Notice for GDPR, CCPA & ePrivacy Consent = 4.3.9 versions...

EUVD-2026-60782

Unauthenticated Cross Site Scripting XSS in Affiliates Manager = 2.9.53 versions...

EUVD-2026-60778

Unauthenticated Cross Site Scripting XSS in WordPress Social Login and Register = 7.8.1 versions...

CVE-2026-73351 WordPress WordPress Social Login and Register plugin <= 7.8.1 - Cross Site Scripting (XSS) vulnerability

Unauthenticated Cross Site Scripting XSS in WordPress Social Login and Register = 7.8.1 versions...

CVE-2026-73351

Unauthenticated Cross Site Scripting XSS in WordPress Social Login and Register = 7.8.1 versions...

CVE-2026-73351

Unauthenticated XSS affects the WordPress Social Login and Register plugin at version 7.8.1 or earlier (CVSS 7.1, HIGH). No specific affected component or remediation version is provided; update to a newer plugin release when available.

CVE-2026-73342

Unauthenticated Cross Site Scripting XSS in WP Multilang = 2.4.31 versions...

CVE-2026-73342

The WordPress WP Multilang plugin (versions 2.4.31 and earlier) contains an unauthenticated stored/reflected XSS flaw exploitable via network access with no privileges, scoring CVSS 7.1 (HIGH); exploitation requires user interaction and impacts confidentiality, integrity, and availability at low ...

EUVD-2026-60772

Unauthenticated Cross Site Scripting XSS in WP Multilang = 2.4.31 versions...

EUVD-2026-60769

Unauthenticated Cross Site Scripting XSS in Autopay = 5.0.0 versions...

CVE-2026-73338

Unauthenticated Cross Site Scripting XSS in Autopay = 5.0.0 versions...

CVE-2026-73338

The WordPress Autopay plugin (versions ≤ 5.0.0) has an unauthenticated reflected/stored XSS flaw, exploitable via a network request with no authentication. CVSS 7.1 (HIGH) reflects low confidentiality/integrity/availability impact. Exploitation details are not provided; update to a patched versio...

EUVD-2026-60768

Unauthenticated Cross Site Scripting XSS in WPDM – Premium Packages = 7.0.5 versions...

CVE-2026-73190

Unauthenticated Cross Site Scripting XSS in WPDM – Premium Packages = 7.0.5 versions...

CVE-2026-73190

WPDM – Premium Packages WordPress plugin versions ≤ 7.0.5 contain an unauthenticated reflected XSS vulnerability discovered by Evan NR. A remote attacker can craft a malicious URL requiring no authentication or privileges; a victim visiting it triggers script execution in their browser (scope cha...

EUVD-2026-60935

Unauthenticated Cross Site Scripting XSS in Convert Pro = 1.0.1 versions...

CVE-2026-68567 WordPress Convert Pro plugin <= 1.0.1 - Cross Site Scripting (XSS) vulnerability

Unauthenticated Cross Site Scripting XSS in Convert Pro = 1.0.1 versions...

CVE-2026-68567

Unauthenticated Cross Site Scripting XSS in Convert Pro = 1.0.1 versions...

CVE-2026-68567

The WordPress Convert Pro plugin (versions ≤ 1.0.1) contains an unauthenticated reflected/stored XSS flaw exploitable via network access with low complexity; CVSS 7.1 (High). Patchstack reports it. Upgrade to a patched version if available; no exploitation evidence provided. See https://patchstac...