1125891 matches found
CVE-2026-66697
CVE-2026-66697 corresponds to an unauthenticated Cross Site Scripting (XSS) vulnerability in the WordPress plugin Colissimo Officiel : Méthodes de livraison pour WooCommerce, affecting versions up to and including 2.10.0. The connected CVE records confirm the affected product (Colissimo Officiel:...
CVE-2026-66698 WordPress SureDash plugin <= 1.10.1 - Cross Site Scripting (XSS) vulnerability
Unauthenticated Cross Site Scripting XSS in SureDash = 1.10.1 versions...
EUVD-2026-57905
Unauthenticated Cross Site Scripting XSS in SureDash = 1.10.1 versions...
CVE-2026-66698
Unauthenticated Cross Site Scripting XSS in SureDash = 1.10.1 versions...
CVE-2026-66697
Unauthenticated Cross Site Scripting XSS in Colissimo Officiel : Méthodes de livraison pour WooCommerce = 2.10.0 versions...
EUVD-2026-57904
Unauthenticated Cross Site Scripting XSS in Colissimo Officiel : Méthodes de livraison pour WooCommerce = 2.10.0 versions...
CVE-2026-66698
CVE-2026-66698 : WordPress SureDash plugin, versions up to 1.10.1, contains an unauthenticated XSS vulnerability. The CVSS 3.1 metrics indicate network access, low impact on confidentiality/ integrity/ availability, and required user interaction. The connected documents do not provide details on ...
CVE-2026-66687
Customer Cross Site Scripting XSS in WpBookingly = 1.3.2 versions...
CVE-2026-66687 WordPress WpBookingly plugin <= 1.3.2 - Cross Site Scripting (XSS) vulnerability
Customer Cross Site Scripting XSS in WpBookingly = 1.3.2 versions...
CVE-2026-66687
The CVE-2026-66687 entry concerns the WordPress WpBookingly plugin (versions ≤ 1.3.2) with a Cross-Site Scripting (XSS) vulnerability. According to connected documents, the affected component is the WpBookingly plugin, and the issue is described as a customer XSS vulnerability in versions up to 1...
CVE-2026-66655
Unauthenticated Cross Site Scripting XSS in MultiParcels Shipping For WooCommerce = 1.30.36 versions...
CVE-2026-66655
CVE-2026-66655 refers to an unauthenticated, reflected Cross Site Scripting (XSS) vulnerability in the WordPress plugin MultiParcels Shipping For WooCommerce , affecting versions
CVE-2026-66471 WordPress Accordion plugin <= 3.0.6 - Cross Site Scripting (XSS) vulnerability
Subscriber Cross Site Scripting XSS in Accordion = 3.0.6 versions...
EUVD-2026-57889
Subscriber Cross Site Scripting XSS in Accordion = 3.0.6 versions...
CVE-2026-66471
Subscriber Cross Site Scripting XSS in Accordion = 3.0.6 versions...
CVE-2026-66468
Unauthenticated Cross Site Scripting XSS in Local Delivery Drivers for WooCommerce = 3.0.0 versions...
CVE-2026-66468
The CVE-2026-66468 entry concerns the WordPress plugin Local Delivery Drivers for WooCommerce (
EUVD-2026-57887
Unauthenticated Cross Site Scripting XSS in Local Delivery Drivers for WooCommerce = 3.0.0 versions...
CVE-2026-66467
Subscriber Cross Site Scripting XSS in FluentCommunity = 2.7.5 versions...
CVE-2026-66467
CVE-2026-66467 affects the WordPress FluentCommunity plugin (versions <= 2.7.5). The connected records confirm a Cross Site Scripting (XSS) vulnerability in the Subscriber context. The CVE entry lists CVSS v3.1 metrics with a base score of 6.5 (Medium) and attributes: Network attack vector, Lo...