1120316 matches found
EUVD-2026-48186
Subscriber Cross Site Scripting XSS in Masteriyo - LMS = 2.3.0 versions...
CVE-2026-59513
CVE-2026-59513 concerns the WordPress Masteriyo LMS plugin (versions ≤ 2.3.0). The issue is a Cross Site Scripting (XSS) vulnerability in the Subscriber context. Per Patchstack, the CVSSv3.1 base score is 6.5 (Medium) with vector AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L , indicating network attack sur...
EUVD-2026-48185
Unauthenticated Cross Site Scripting XSS in Product Enquiry for WooCommerce = 2.2.34.43 versions...
CVE-2026-59512
CVE-2026-59512 describes an unauthenticated XSS in WordPress plugin Product Enquiry for WooCommerce, versions
EUVD-2026-48184
Unauthenticated Cross Site Scripting XSS in AffiliateWP = 2.34.0 versions...
CVE-2026-57809
The CVE-2026-57809 entry describes an Unauthenticated Reflected Cross-Site Scripting (XSS) vulnerability in the WordPress AffiliateWP plugin up to version 2.34.0 . Affected component is the plugin’s input handling leading to reflected XSS; the issue is exploitable without authentication. Official...
EUVD-2026-48180
Unauthenticated Cross Site Scripting XSS in Grand Photography = 5.7.8 versions...
CVE-2026-57769
Unauthenticated Cross Site Scripting XSS in Grand Photography = 5.7.8 versions...
EUVD-2026-48179
Unauthenticated Cross Site Scripting XSS in WP Google Maps Pro = 10.1.02 versions...
CVE-2026-57767
WP Google Maps Pro plugin <= 10.1.02 has an unauthenticated Cross Site Scripting (XSS) vulnerability. Affects versions
CVE-2026-57735
CVE-2026-57735 concerns the WordPress Breakdance plugin, affected in versions ≤ 2.7.1, with unauthenticated Cross Site Scripting (XSS). The description and connected records confirm an XSS vulnerability exploitable without authentication, impacting Breakdance functionality through the specified v...
EUVD-2026-48178
Unauthenticated Cross Site Scripting XSS in Breakdance = 2.7.1 versions...
CVE-2026-57704
CVE-2026-57704 : Unauthenticated Cross Site Scripting (XSS) in the WordPress Smart Manager plugin for WP e‑commerce, versions ≤ 8.90.0. Root cause and specific exploit path are not detailed in the provided documents. CVSSv3.1 base score 7.1 (HIGH) with network attack vector and user interaction r...
EUVD-2026-48175
Unauthenticated Cross Site Scripting XSS in Smart Manager = 8.90.0 versions...
CVE-2026-57699
The CVE-2026-57699 entry concerns the WordPress Slider Pro plugin (versions ≤ 4.8.13) with a Cross Site Scripting (XSS) vulnerability affecting subscribers. The Patchstack-backed details identify the affected component and vulnerability type, with a CVSS 3.1 vector of AV:N/AC:L/PR:N/UI:R/S:C/C:L/...
EUVD-2026-48173
Unauthenticated Cross Site Scripting XSS in Real Estate Manager Pro = 12.8.5 versions...
EUVD-2026-48172
Subscriber Cross Site Scripting XSS in Slider Pro = 4.8.13 versions...
CVE-2026-57701
The CVE affects WordPress plugin Real Estate Manager Pro, versions