CVE-2026-57384

CVE-2026-57384 describes a Cross Site Scripting (XSS) vulnerability in the WordPress WishList Member X plugin, affecting versions

CVE-2026-57397

Summary: CVE-2026-57397 describes an unauthenticated Cross Site Scripting (XSS) vulnerability in the WordPress Coaching theme, affected versions <= 3.9.2. Affected product/component: WordPress Coaching theme (WordPress plugin/theme). Root cause / vulnerability type: Cross Site Scripting (XSS);...

EUVD-2026-48167

Unauthenticated Cross Site Scripting XSS in Coaching = 3.9.2 versions...

CVE-2026-57374

CVE-2026-57374 is an unauthenticated Cross Site Scripting (XSS) vulnerability affecting the WordPress Funnel Kit Funnel Builder PRO plugin, versioned <= 3.15.0.7. The CVSS v3.1 base score is 7.1 (HIGH) with NETWORK attack vector, LOW impacts to confidentiality/integrity/availability, and user ...

EUVD-2026-48165

Unauthenticated Cross Site Scripting XSS in Funnel Kit Funnel Builder PRO = 3.15.0.7 versions...

EUVD-2026-48164

Customer Cross Site Scripting XSS in Funnel Kit Funnel Builder PRO = 3.15.0.4 versions...

CVE-2026-57370

Summary (CVE-2026-57370): Unauthenticated reflected Cross Site Scripting (XSS) in WordPress plugin Visitor Traffic Real Time Statistics Pro versions

EUVD-2026-48163

Unauthenticated Cross Site Scripting XSS in Visitor Traffic Real Time Statistics Pro = 11.9.1 versions...

CVE-2026-57373

CVE-2026-57373 affects WordPress Funnel Kit Funnel Builder PRO plugin, versions

CVE-2026-27403

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in NerdPress Hubbub Lite allows Stored XSS. This issue affects Hubbub Lite: from n/a through 1.36.3...

CVE-2026-27403

CVE-2026-27403 concerns the WordPress Hubbub Lite plugin, versions

EUVD-2026-48158

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in NerdPress Hubbub Lite allows Stored XSS. This issue affects Hubbub Lite: from n/a through 1.36.3...

CVE-2026-24628

CVE-2026-24628 affects the WordPress plugin Photo Gallery by Supsystic (versions

EUVD-2026-48145

Administrator Cross Site Scripting XSS in Photo Gallery by Supsystic = 1.16.3 versions...

CVE-2025-68081

CVE-2025-68081 : A cross-site scripting (XSS) vulnerability affects the WordPress plugin WP-Polls in versions

EUVD-2025-210505

Administrator Cross Site Scripting XSS in WP-Polls = 2.77.3 versions...

Astra Linux – Vulnerability in Chromium

Inappropriate implementation in WebGL in Google Chrome prior to 150.0.7871.115 allowed a remote attacker to inject arbitrary scripts or HTML UXSS via a crafted HTML page. Chromium security severity: High...

Astra Linux – Vulnerability in Chromium

Inappropriate implementation in Serial in Google Chrome prior to 149.0.7827.155 allowed a remote attacker to inject arbitrary scripts or HTML UXSS via a crafted HTML page. Chromium security severity: High...

Astra Linux – Vulnerability in Chromium

Inappropriate implementation in XML in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to inject arbitrary scripts or HTML UXSS via a crafted XML file. Chromium security severity: Medium...

CVE-2026-15794

The Grid/List View for WooCommerce plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'position' Shortcode Attribute in all versions up to, and including, 3.0.9 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with...