CVE-2026-66641

Contributor Cross Site Scripting XSS in Video Conferencing with Zoom = 4.6.8 versions...

CVE-2026-66641 WordPress Video Conferencing with Zoom plugin <= 4.6.8 - Cross Site Scripting (XSS) vulnerability

Contributor Cross Site Scripting XSS in Video Conferencing with Zoom = 4.6.8 versions...

CVE-2026-66641

The WordPress Video Conferencing with Zoom plugin (versions

CVE-2026-66640 WordPress Login With Ajax plugin <= 4.5.1 - Cross Site Scripting (XSS) vulnerability

Contributor Cross Site Scripting XSS in Login With Ajax = 4.5.1 versions...

EUVD-2026-60925

Contributor Cross Site Scripting XSS in Login With Ajax = 4.5.1 versions...

CVE-2026-66640

Contributor Cross Site Scripting XSS in Login With Ajax = 4.5.1 versions...

CVE-2026-66640

The WordPress Login With Ajax plugin (versions ≤ 4.5.1) has a contributor-level stored XSS vulnerability. CVSS 6.5 (MEDIUM), network vector, low privileges required. No patch version is provided. No in-the-wild exploitation is reported. Upgrade to a patched version once released. Details: https:/...

CVE-2026-66639

WPZOOM Forms – Contact Form Plugin for Gutenberg (WordPress) contains a Contributor Cross Site Scripting (XSS) vulnerability affecting versions

CVE-2026-66639

Contributor Cross Site Scripting XSS in WPZOOM Forms – Contact Form Plugin for Gutenberg = 2.0.4 versions...

CVE-2026-66639 WordPress WPZOOM Forms – Contact Form plugin for Gutenberg plugin <= 2.0.4 - Cross Site Scripting (XSS) vulnerability

Contributor Cross Site Scripting XSS in WPZOOM Forms – Contact Form Plugin for Gutenberg = 2.0.4 versions...

EUVD-2026-60924

Contributor Cross Site Scripting XSS in WPZOOM Forms – Contact Form Plugin for Gutenberg = 2.0.4 versions...

CVE-2026-66638

The Frontend Admin by DynamiApps WordPress plugin (versions ≤ 3.29.10) contains a contributor-level reflected/stored Cross-Site Scripting (XSS) flaw. A user with contributor privileges can inject malicious scripts that execute in other users' browsers. CVSS 3.1 scores this MEDIUM (6.5) with netwo...

CVE-2026-66638

Contributor Cross Site Scripting XSS in Frontend Admin by DynamiApps = 3.29.10 versions...

EUVD-2026-60923

Contributor Cross Site Scripting XSS in Frontend Admin by DynamiApps = 3.29.10 versions...

CVE-2026-66637 WordPress Featured Video Plus plugin <= 2.3.3 - Cross Site Scripting (XSS) vulnerability

Contributor Cross Site Scripting XSS in Featured Video Plus = 2.3.3 versions...

EUVD-2026-60922

Contributor Cross Site Scripting XSS in Featured Video Plus = 2.3.3 versions...

CVE-2026-66637

Contributor Cross Site Scripting XSS in Featured Video Plus = 2.3.3 versions...

EUVD-2026-60921

Contributor Cross Site Scripting XSS in Wise Chat = 3.4 versions...

CVE-2026-66636 WordPress Wise Chat plugin <= 3.4 - Cross Site Scripting (XSS) vulnerability

Contributor Cross Site Scripting XSS in Wise Chat = 3.4 versions...

CVE-2026-66636

The WordPress Wise Chat plugin (versions ≤ 3.4) is vulnerable to contributor-level stored XSS, allowing authenticated users with contributor privileges to inject malicious scripts that execute in other users' browsers. CVSS 3.1 scores it MEDIUM (6.5) with network attack vector, low complexity, an...