EUVD-2026-48121

Contributor Cross Site Scripting XSS in Accept Donations with PayPal & Stripe = 1.5.5 versions...

EUVD-2026-48122

Author Cross Site Scripting XSS in Photo Gallery = 2.7.7.29 versions...

CVE-2026-65518

The CVE concerns the WordPress plugin “Accept Donations with PayPal & Stripe” (v <= 1.5.5) and reports a Cross Site Scripting (XSS) vulnerability. Affected product is the WordPress plugin; vulnerability arises from an XSS issue in versions up to 1.5.5 as described in the CVE records. Public re...

CVE-2026-65519

The advisory concerns CVE-2026-65519: a Cross Site Scripting (XSS) vulnerability in the WordPress Photo Gallery plugin, versions up to 2.7.7.29. According to the record, an author context XSS exists in affected releases. The CVSS v3.1 vector is CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L with a ...

EUVD-2026-48119

Contributor Cross Site Scripting XSS in Appointment Hour Booking = 1.5.86 versions...

CVE-2026-65514

CVE-2026-65514 affects the WordPress plugin Appointment Hour Booking up to version 1.5.86, with a reported Cross Site Scripting (XSS) vulnerability. The CVSS 3.1 base score is 6.5 (Medium); attack vector is network, attack complexity low, privileges required low, and user interaction is required,...

EUVD-2026-48117

Unauthenticated Cross Site Scripting XSS in Manual - Documentation, Knowledge Base & Education WordPress Theme = 7.5.4 versions...

CVE-2026-65511

CVE-2026-65511 affects the WordPress Manual - Documentation, Knowledge Base & Education WordPress Theme (versions

EUVD-2026-48116

Unauthenticated Cross Site Scripting XSS in PeproDev Ultimate Invoice = 2.2.6 versions...

CVE-2026-65510

CVE-2026-65510 is a real issue affecting the WordPress plugin PeproDev Ultimate Invoice

EUVD-2026-48113

Contributor Cross Site Scripting XSS in Ultimate Store Kit Elementor Addons = 3.0.5 versions...

CVE-2026-65503

The CVE concerns WordPress plugin Ultimate Store Kit Elementor Addons versions

EUVD-2026-48103

Unauthenticated Cross Site Scripting XSS in Dokan Pro = 5.0.0 versions...

CVE-2026-65492 WordPress Dokan Pro plugin <= 5.0.0 - Cross Site Scripting (XSS) vulnerability

Unauthenticated Cross Site Scripting XSS in Dokan Pro = 5.0.0 versions...

CVE-2026-65492

CVE-2026-65492 : Unauthenticated Cross Site Scripting (XSS) in the WordPress Dokan Pro plugin, version

EUVD-2026-48093

Contributor Cross Site Scripting XSS in LA-Studio Element Kit for Elementor = 1.6.2 versions...

EUVD-2026-48094

Author Cross Site Scripting XSS in HashThemes Demo Importer = 1.4.2 versions...

CVE-2026-65482

The CVE-2026-65482 entry concerns the WordPress LA-Studio Element Kit for Elementor plugin, affected in versions

CVE-2026-65483

CVE-2026-65483 describes a Cross Site Scripting (XSS) vulnerability in the WordPress plugin HashThemes Demo Importer, version

EUVD-2026-48091

Contributor Cross Site Scripting XSS in TheGem = 5.11.1 versions...