EUVD-2026-60922

Contributor Cross Site Scripting XSS in Featured Video Plus = 2.3.3 versions...

EUVD-2026-60921

Contributor Cross Site Scripting XSS in Wise Chat = 3.4 versions...

CVE-2026-66636 WordPress Wise Chat plugin <= 3.4 - Cross Site Scripting (XSS) vulnerability

Contributor Cross Site Scripting XSS in Wise Chat = 3.4 versions...

CVE-2026-66636

Contributor Cross Site Scripting XSS in Wise Chat = 3.4 versions...

CVE-2026-66636

The WordPress Wise Chat plugin (versions ≤ 3.4) is vulnerable to contributor-level stored XSS, allowing authenticated users with contributor privileges to inject malicious scripts that execute in other users' browsers. CVSS 3.1 scores it MEDIUM (6.5) with network attack vector, low complexity, an...

CVE-2026-66633

Unauthenticated Cross Site Scripting XSS in Fluent Forms Pro Add On Pack 6.2.12 versions...

CVE-2026-66633

Unauthenticated Cross Site Scripting XSS in Fluent Forms Pro Add On Pack 6.2.12 versions...

CVE-2026-66633 WordPress Fluent Forms Pro Add On Pack plugin < 6.2.12 - Cross Site Scripting (XSS) vulnerability

Unauthenticated Cross Site Scripting XSS in Fluent Forms Pro Add On Pack 6.2.12 versions...

EUVD-2026-60918

Unauthenticated Cross Site Scripting XSS in Fluent Forms Pro Add On Pack 6.2.12 versions...

CVE-2026-66633 WordPress Fluent Forms Pro Add On Pack plugin < 6.2.12 - Cross Site Scripting (XSS) vulnerability

Unauthenticated Cross Site Scripting XSS in Fluent Forms Pro Add On Pack 6.2.12 versions...

CVE-2026-66629 WordPress Kirki plugin <= 6.2.3 - Cross Site Scripting (XSS) vulnerability

Unauthenticated Cross Site Scripting XSS in Kirki = 6.2.3 versions...

EUVD-2026-60917

Unauthenticated Cross Site Scripting XSS in Kirki = 6.2.3 versions...

CVE-2026-66629

Unauthenticated Cross Site Scripting XSS in Kirki = 6.2.3 versions...

EUVD-2026-60914

Unauthenticated Cross Site Scripting XSS in Ultimate Dashboard = 3.11.2 versions...

CVE-2026-66621 WordPress Ultimate Dashboard plugin <= 3.11.2 - Cross Site Scripting (XSS) vulnerability

Unauthenticated Cross Site Scripting XSS in Ultimate Dashboard = 3.11.2 versions...

CVE-2026-66621

Unauthenticated Cross Site Scripting XSS in Ultimate Dashboard = 3.11.2 versions...

CVE-2026-32547

Unauthenticated Cross Site Scripting XSS in BP Better Messages = 2.15.22 versions...

CVE-2026-32547 WordPress BP Better Messages plugin <= 2.15.22 - Cross Site Scripting (XSS) vulnerability

Unauthenticated Cross Site Scripting XSS in BP Better Messages = 2.15.22 versions...

EUVD-2026-60910

Unauthenticated Cross Site Scripting XSS in BP Better Messages = 2.15.22 versions...

EUVD-2026-60897

Unauthenticated Cross Site Scripting XSS in Mayosis Core = 5.4.7 versions...