EUVD-2026-60783

Subscriber Cross Site Scripting XSS in WP Cookie Notice for GDPR, CCPA & ePrivacy Consent = 4.3.9 versions...

CVE-2026-73359 WordPress WP Cookie Notice for GDPR, CCPA & ePrivacy Consent plugin <= 4.3.9 - Cross Site Scripting (XSS) vulnerability

Subscriber Cross Site Scripting XSS in WP Cookie Notice for GDPR, CCPA & ePrivacy Consent = 4.3.9 versions...

CVE-2026-73360 WordPress Chaty Pro plugin <= 3.5.8 - Cross Site Scripting (XSS) vulnerability

Unauthenticated Cross Site Scripting XSS in Chaty Pro = 3.5.8 versions...

CVE-2026-73359

The WP Cookie Notice for GDPR, CCPA & ePrivacy Consent plugin (versions ≤4.3.9) has a Subscriber-level stored XSS vulnerability; a low-privilege authenticated user can inject scripts that execute in other users' browsers, rated MEDIUM (CVSS 6.5). No patch version or exploitation evidence is provi...

EUVD-2026-60784

Unauthenticated Cross Site Scripting XSS in Chaty Pro = 3.5.8 versions...

CVE-2026-73359

Subscriber Cross Site Scripting XSS in WP Cookie Notice for GDPR, CCPA & ePrivacy Consent = 4.3.9 versions...

EUVD-2026-60782

Unauthenticated Cross Site Scripting XSS in Affiliates Manager = 2.9.53 versions...

EUVD-2026-60778

Unauthenticated Cross Site Scripting XSS in WordPress Social Login and Register = 7.8.1 versions...

CVE-2026-73351 WordPress WordPress Social Login and Register plugin <= 7.8.1 - Cross Site Scripting (XSS) vulnerability

Unauthenticated Cross Site Scripting XSS in WordPress Social Login and Register = 7.8.1 versions...

CVE-2026-73351

Unauthenticated Cross Site Scripting XSS in WordPress Social Login and Register = 7.8.1 versions...

CVE-2026-73351

Unauthenticated XSS affects the WordPress Social Login and Register plugin at version 7.8.1 or earlier (CVSS 7.1, HIGH). No specific affected component or remediation version is provided; update to a newer plugin release when available.

CVE-2026-73342

Unauthenticated Cross Site Scripting XSS in WP Multilang = 2.4.31 versions...

CVE-2026-73342

The WordPress WP Multilang plugin (versions 2.4.31 and earlier) contains an unauthenticated stored/reflected XSS flaw exploitable via network access with no privileges, scoring CVSS 7.1 (HIGH); exploitation requires user interaction and impacts confidentiality, integrity, and availability at low ...

EUVD-2026-60772

Unauthenticated Cross Site Scripting XSS in WP Multilang = 2.4.31 versions...

EUVD-2026-60769

Unauthenticated Cross Site Scripting XSS in Autopay = 5.0.0 versions...

CVE-2026-73338

Unauthenticated Cross Site Scripting XSS in Autopay = 5.0.0 versions...

CVE-2026-73338

The WordPress Autopay plugin (versions ≤ 5.0.0) has an unauthenticated reflected/stored XSS flaw, exploitable via a network request with no authentication. CVSS 7.1 (HIGH) reflects low confidentiality/integrity/availability impact. Exploitation details are not provided; update to a patched versio...

EUVD-2026-60768

Unauthenticated Cross Site Scripting XSS in WPDM – Premium Packages = 7.0.5 versions...

CVE-2026-73190

Unauthenticated Cross Site Scripting XSS in WPDM – Premium Packages = 7.0.5 versions...

CVE-2026-73190

WPDM – Premium Packages WordPress plugin versions ≤ 7.0.5 contain an unauthenticated reflected XSS vulnerability discovered by Evan NR. A remote attacker can craft a malicious URL requiring no authentication or privileges; a victim visiting it triggers script execution in their browser (scope cha...