CVE-2026-61963

Unauthenticated Cross Site Scripting XSS in Media LIbrary Assistant = 3.38 versions...

CVE-2026-61963 WordPress Media LIbrary Assistant plugin <= 3.38 - Cross Site Scripting (XSS) vulnerability

Unauthenticated Cross Site Scripting XSS in Media LIbrary Assistant = 3.38 versions...

CVE-2026-61963

WordPress Media Library Assistant plugin ≤ 3.38 has an unauthenticated XSS vulnerability. The CVE and connected records describe unauthenticated cross-site scripting in versions up to 3.38. No root-cause, exploit details, or remediation are provided in the documents; further specifics on impact a...

CVE-2026-61959 WordPress Business Directory plugin <= 6.4.24 - Cross Site Scripting (XSS) vulnerability

Subscriber Cross Site Scripting XSS in Business Directory = 6.4.24 versions...

CVE-2026-61959

The CVE-2026-61959 entry concerns a Cross Site Scripting (XSS) vulnerability in the WordPress Business Directory plugin, affecting versions

CVE-2026-61961

CVE-2026-61961 concerns the WordPress plugin EmbedPress (versions

EUVD-2026-53956

Subscriber Cross Site Scripting XSS in Business Directory = 6.4.24 versions...

EUVD-2026-53957

Unauthenticated Cross Site Scripting XSS in EmbedPress = 4.5.6 versions...

CVE-2026-28179

CVE-2026-28179 affects the WordPress FiboSearch plugin (versions

EUVD-2026-53950

Contributor Cross Site Scripting XSS in Powerkit = 3.1.0 versions...

CVE-2026-28178

The CVE-2026-28178 entry concerns the WordPress Powerkit plugin, affected versions

CVE-2026-28179 WordPress FiboSearch plugin <= 1.33.0 - Cross Site Scripting (XSS) vulnerability

Shop manager Cross Site Scripting XSS in FiboSearch = 1.33.0 versions...

CVE-2026-28178 WordPress Powerkit plugin <= 3.1.0 - Cross Site Scripting (XSS) vulnerability

Contributor Cross Site Scripting XSS in Powerkit = 3.1.0 versions...

EUVD-2026-53951

Shop manager Cross Site Scripting XSS in FiboSearch = 1.33.0 versions...

CVE-2026-28177 WordPress Popup Maker plugin <= 1.23.0 - Cross Site Scripting (XSS) vulnerability

Unauthenticated Cross Site Scripting XSS in Popup Maker = 1.23.0 versions...

EUVD-2026-53949

Unauthenticated Cross Site Scripting XSS in Popup Maker = 1.23.0 versions...

CVE-2026-28177

Popup Maker WordPress plugin

CVE-2026-28172 WordPress Tracking Code Manager plugin <= 2.6.0 - CSRF to Stored XSS vulnerability

Unauthenticated Cross Site Request Forgery CSRF in Tracking Code Manager = 2.6.0 versions...

EUVD-2026-53944

Unauthenticated Cross Site Scripting XSS in NextGEN Gallery = 4.2.3 versions...

CVE-2026-28143

Forminator plugin for WordPress is affected by CVE-2026-28143: unauthenticated XSS in versions up to and including 1.56.0. The vulnerability arises in the plugin code path handling input that can be crafted by an attacker without authentication. Impact, as described in the sources, is Cross Site ...