1124596 matches found
CVE-2026-66688
The CVE-2026-66688 entry concerns a Contributor Cross Site Scripting (XSS) vulnerability in the WordPress plugin Ultimate Addons for Elementor , affected in versions
EUVD-2026-53898
Contributor Cross Site Scripting XSS in Ultimate Addons for Elementor = 1.45.2 versions...
EUVD-2026-53890
Unauthenticated Cross Site Scripting XSS in SEO Plugin by Squirrly SEO = 14.2.0 versions...
CVE-2026-66664
CVE-2026-66664 : Unauthenticated XSS in the WordPress plugin “SEO Plugin by Squirrly SEO” (versions
CVE-2026-66664 WordPress SEO plugin by Squirrly SEO plugin <= 14.2.0 - Cross Site Scripting (XSS) vulnerability
Unauthenticated Cross Site Scripting XSS in SEO Plugin by Squirrly SEO = 14.2.0 versions...
CVE-2026-66664 WordPress SEO plugin by Squirrly SEO plugin <= 14.2.0 - Cross Site Scripting (XSS) vulnerability
Unauthenticated Cross Site Scripting XSS in SEO Plugin by Squirrly SEO = 14.2.0 versions...
CVE-2026-66664
Unauthenticated Cross Site Scripting XSS in SEO Plugin by Squirrly SEO = 14.2.0 versions...
CVE-2026-66663 WordPress WP Data Access plugin <= 5.5.79 - Cross Site Scripting (XSS) vulnerability
Unauthenticated Cross Site Scripting XSS in WP Data Access = 5.5.79 versions...
EUVD-2026-53889
Unauthenticated Cross Site Scripting XSS in WP Data Access = 5.5.79 versions...
CVE-2026-66663
Unauthenticated Cross Site Scripting XSS in WP Data Access = 5.5.79 versions...
CVE-2026-66663
CVE-2026-66663 describes an Unauthenticated Cross Site Scripting (XSS) vulnerability in the WordPress plugin WP Data Access (versions
EUVD-2026-53886
Unauthenticated Cross Site Scripting XSS in Events Manager = 7.4.1 versions...
CVE-2026-66457
CVE-2026-66457 describes an unauthenticated cross-site scripting (XSS) vulnerability in the WordPress Events Manager plugin version ≤ 7.4.1. The issue is identified as an XSS flaw; no root-cause specifics are provided in the documents. Exploitation status and precise impact vectors are not detail...
CVE-2026-66457 WordPress Events Manager plugin <= 7.4.1 - Cross Site Scripting (XSS) vulnerability
Unauthenticated Cross Site Scripting XSS in Events Manager = 7.4.1 versions...
EUVD-2026-53881
Unauthenticated Cross Site Scripting XSS in Advanced AJAX Product Filters = 3.2.0.3 versions...
EUVD-2026-53882
Unauthenticated Cross Site Scripting XSS in WPIDE – File Manager & Code Editor = 3.5.7 versions...
CVE-2026-66439 WordPress Advanced AJAX Product Filters plugin <= 3.2.0.3 - Cross Site Scripting (XSS) vulnerability
Unauthenticated Cross Site Scripting XSS in Advanced AJAX Product Filters = 3.2.0.3 versions...
CVE-2026-66439
CVE-2026-66439 concerns the WordPress plugin Advanced AJAX Product Filters with versions up to 3.2.0.3, where an unauthenticated cross-site scripting (XSS) vulnerability exists. The connected sources consistently describe an XSS flaw in this plugin version range, but do not provide concrete detai...
CVE-2026-66440
The CVE-2026-66440 entry documents an Unauthenticated Cross-Site Scripting (XSS) vulnerability in the WPIDE – File Manager & Code Editor WordPress plugin up to version 3.5.7. Affected component is the plugin’s WPIDE File Manager/Code Editor functionality; the flaw is an XSS issue exploitable with...