1125752 matches found
CVE-2026-66643
Contributor-level XSS in Wufoo Shortcode plugin (≤1.55) allows low-privileged users to inject scripts rendered in other users' browsers. CVSS 6.5 (medium) reflects network attack vector, low complexity, and required user interaction. Patchstack is the CNA; update to a fixed version beyond 1.55. N...
CVE-2026-66643 WordPress Wufoo Shortcode plugin <= 1.55 - Cross Site Scripting (XSS) vulnerability
Contributor Cross Site Scripting XSS in Wufoo Shortcode = 1.55 versions...
EUVD-2026-60927
Contributor Cross Site Scripting XSS in Wufoo Shortcode = 1.55 versions...
CVE-2026-66643
Contributor Cross Site Scripting XSS in Wufoo Shortcode = 1.55 versions...
EUVD-2026-60926
Contributor Cross Site Scripting XSS in Video Conferencing with Zoom = 4.6.8 versions...
CVE-2026-66641 WordPress Video Conferencing with Zoom plugin <= 4.6.8 - Cross Site Scripting (XSS) vulnerability
Contributor Cross Site Scripting XSS in Video Conferencing with Zoom = 4.6.8 versions...
CVE-2026-66641
The WordPress Video Conferencing with Zoom plugin (versions
EUVD-2026-60925
Contributor Cross Site Scripting XSS in Login With Ajax = 4.5.1 versions...
CVE-2026-66640 WordPress Login With Ajax plugin <= 4.5.1 - Cross Site Scripting (XSS) vulnerability
Contributor Cross Site Scripting XSS in Login With Ajax = 4.5.1 versions...
CVE-2026-66640
Contributor Cross Site Scripting XSS in Login With Ajax = 4.5.1 versions...
EUVD-2026-60924
Contributor Cross Site Scripting XSS in WPZOOM Forms – Contact Form Plugin for Gutenberg = 2.0.4 versions...
EUVD-2026-60923
Contributor Cross Site Scripting XSS in Frontend Admin by DynamiApps = 3.29.10 versions...
CVE-2026-66638 WordPress Frontend Admin by DynamiApps plugin <= 3.29.10 - Cross Site Scripting (XSS) vulnerability
Contributor Cross Site Scripting XSS in Frontend Admin by DynamiApps = 3.29.10 versions...
CVE-2026-66637 WordPress Featured Video Plus plugin <= 2.3.3 - Cross Site Scripting (XSS) vulnerability
Contributor Cross Site Scripting XSS in Featured Video Plus = 2.3.3 versions...
CVE-2026-66637
Contributor-level users can inject unsanitized JavaScript into the WordPress Featured Video Plus plugin (versions ≤ 2.3.3), enabling stored XSS that executes in victims' browsers (CVSS 6.5, medium). No fix version or exploit details are provided; monitor the Patchstack advisory for updates.
EUVD-2026-60922
Contributor Cross Site Scripting XSS in Featured Video Plus = 2.3.3 versions...
CVE-2026-66637
Contributor Cross Site Scripting XSS in Featured Video Plus = 2.3.3 versions...
EUVD-2026-60921
Contributor Cross Site Scripting XSS in Wise Chat = 3.4 versions...
CVE-2026-66636
The WordPress Wise Chat plugin (versions ≤ 3.4) is vulnerable to contributor-level stored XSS, allowing authenticated users with contributor privileges to inject malicious scripts that execute in other users' browsers. CVSS 3.1 scores it MEDIUM (6.5) with network attack vector, low complexity, an...