CVE-2026-66471

Subscriber Cross Site Scripting XSS in Accordion = 3.0.6 versions...

CVE-2026-66429

Unauthenticated Cross Site Scripting XSS in Visitor Traffic Real Time Statistics Pro = 11.10 versions...

CVE-2026-65580

Unauthenticated Cross Site Scripting XSS in Agrion = 1.0.0 versions...

CVE-2026-66426

Unauthenticated Cross Site Scripting XSS in WP-Stats = 2.56 versions...

CVE-2026-61974

Unauthenticated Cross Site Scripting XSS in Mang Board WP = 2.3.4 versions...

CVE-2026-61960

Unauthenticated Cross Site Scripting XSS in WP Full Stripe Free = 8.5.0 versions...

CVE-2026-61965

Unauthenticated Cross Site Scripting XSS in GeekyBot = 1.2.6 versions...

CVE-2026-28187

Unauthenticated Cross Site Scripting XSS in Knowledge Base for Documentation, FAQs with AI Assistance = 17.211.0 versions...

CVE-2026-28182

Subscriber Cross Site Scripting XSS in AcyMailing SMTP Newsletter = 10.11.1 versions...

CVE-2026-28175

Unauthenticated Cross Site Scripting XSS in Visitors Traffic Real Time Statistics = 8.11 versions...

CVE-2026-28158

Unauthenticated Cross Site Scripting XSS in Do Lasso = 358 versions...

CVE-2026-28003

Unauthenticated Cross Site Scripting XSS in Maspik – Spam blacklist = 2.9.1 versions...

CVE-2026-28004

Unauthenticated Cross Site Scripting XSS in Business Directory = 6.4.25 versions...

CVE-2026-27536

Unauthenticated Cross Site Scripting XSS in MailChimp Subscribe Forms = 4.3.3 versions...

CVE-2026-19716

Stored Cross-site Scripting CWE-79 in the user management component in maalfer Pentestify before 1.1.1 allows an authenticated attacker to execute arbitrary JavaScript in the browser of another authenticated user via a crafted username, because the frontend escapes the username with escapeHTML...

NPM: ep_etherpad-lite: Cache-poisoning Cross-site Scripting and Open Redirect via x-proxy-path Header

NPM: epetherpad-lite: Cache-poisoning Cross-site Scripting and Open Redirect via x-proxy-path Header vulnerability discovered by ? in WordPress Npm epetherpad-lite versions = 2.1.0, = 3.0.0...

CVE-2026-73357 WordPress GiveWP plugin < 4.16.6 - Cross Site Scripting (XSS) vulnerability

Donor Cross Site Scripting XSS in GiveWP 4.16.6 versions...

EUVD-2026-57914

Donor Cross Site Scripting XSS in GiveWP 4.16.6 versions...

EUVD-2026-57910

Author Cross Site Scripting XSS in WP Data Access = 5.5.79 versions...

CVE-2026-73344

The CVE-2026-73344 entry concerns the WordPress WP Data Access plugin, affected versions