CVE-2026-42635

Unauthenticated Cross Site Scripting XSS in WooCommerce Simple Auctions = 3.0.10 versions...

EUVD-2026-93057

Unauthenticated Cross Site Scripting XSS in WooCommerce Simple Auctions = 3.0.10 versions...

CVE-2026-42635

The WooCommerce Simple Auctions WordPress plugin (versions

CVE-2026-42635 WordPress WooCommerce Simple Auctions plugin <= 3.0.10 - Cross Site Scripting (XSS) vulnerability

Unauthenticated Cross Site Scripting XSS in WooCommerce Simple Auctions = 3.0.10 versions...

CVE-2026-42635 WordPress WooCommerce Simple Auctions plugin <= 3.0.10 - Cross Site Scripting (XSS) vulnerability

Unauthenticated Cross Site Scripting XSS in WooCommerce Simple Auctions = 3.0.10 versions...

PT-2026-106479

Unauthenticated Cross Site Scripting XSS in WooCommerce Simple Auctions = 3.0.10 versions...

CVE-2026-42635: Improper Neutralization of Input During Web Page Generation

Unauthenticated Cross Site Scripting XSS in WooCommerce Simple Auctions = 3.0.10 versions...

WordPress WooCommerce Simple Auctions plugin <= 3.0.10 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by Nguyen Ba Khanh - HPT Vietnam Corporation in WordPress Plugin WooCommerce Simple Auctions versions = 3.0.10...

CVE-2026-54735

Prebid Server (open-source in real-time advertising auctions) contains a vulnerability (CVE-2026-54735) in versions prior to 4.4.0 where certain bidder adapters interpolate user-supplied parameters into outbound request URLs without proper host/subdomain validation, enabling crafted bid requests ...

WordPress Ultimate WooCommerce Auction Pro plugin <= 2.4.5 - Reflected XSS via uwa_manage_auctions vulnerability

Reflected XSS via uwamanageauctions vulnerability discovered by Kacper Rybczyński in WordPress Plugin Ultimate Auction Pro versions = 2.4.5...

CVE-2026-4259

The ultimate-woocommerce-auction-pro WordPress plugin (versions

CVE-2026-4259 Ultimate WooCommerce Auction Pro <= 2.4.5 - Reflected XSS via uwa_manage_auctions

The ultimate-woocommerce-auction-pro WordPress plugin through 2.4.5 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin...

EUVD-2022-55989

uBidAuction 2.0.1 contains a reflected cross-site scripting vulnerability in the auctions/manage module. The datecreated, datefrom, dateto, and createdat parameters in the filter functionality are not properly sanitized, allowing remote attackers to inject malicious scripts via crafted GET reques...

EUVD-2022-55984

uBidAuction 2.0.1 contains a reflected cross-site scripting vulnerability in the auctions/myAuctions/status/active module. The datecreated, datefrom, dateto, and createdat parameters in the filter functionality are not properly sanitized, allowing remote attackers to inject malicious scripts via...

CVE-2022-50964

uBidAuction 2.0.1 contains a reflected cross-site scripting vulnerability in the auctions/myAuctions/status/loose module. The datecreated, datefrom, dateto, and createdat parameters in the filter functionality are not properly sanitized, allowing remote attackers to inject malicious scripts via...

CVE-2022-50968

uBidAuction 2.0.1 contains a reflected cross-site scripting vulnerability in the auctions/manage module. The datecreated, datefrom, dateto, and createdat parameters in the filter functionality are not properly sanitized, allowing remote attackers to inject malicious scripts via crafted GET reques...

CVE-2022-50968

uBidAuction 2.0.1 contains a reflected cross-site scripting vulnerability in the auctions/manage module. The datecreated, datefrom, dateto, and createdat parameters in the filter functionality are not properly sanitized, allowing remote attackers to inject malicious scripts via crafted GET reques...

CVE-2022-50968 uBidAuction 2.0.1 auctions manage Reflected XSS

uBidAuction 2.0.1 contains a reflected cross-site scripting vulnerability in the auctions/manage module. The datecreated, datefrom, dateto, and createdat parameters in the filter functionality are not properly sanitized, allowing remote attackers to inject malicious scripts via crafted GET reques...

CVE-2022-50968

uBidAuction 2.0.1 contains a reflected XSS in the auctions/manage module. The filter parameters date_created, date_from, date_to, and created_at are not sanitized, allowing remote attackers to inject scripts via crafted GET requests that run in victims’ browsers. The provided sources corroborate ...

CVE-2022-50963

uBidAuction 2.0.1 has a reflected cross-site scripting vulnerability in the auctions/myAuctions/status/active module. The filter parameters date_created, date_from, date_to, and created_at are not properly sanitized, allowing remote attackers to inject scripts via crafted GET requests that execut...