CVE-2026-66448

WordPress Gallery PhotoBlocks plugin ≤ 1.3.3 has a Cross Site Scripting (XSS) vulnerability in contributor contexts. Affected product: Gallery PhotoBlocks plugin for WordPress (versions up to 1.3.3). Root cause details are not provided in the documents. CVSSv3.1 base score 6.5 (AV:N/AC:L/PR:L/UI:...

EUVD-2026-49247

Contributor Cross Site Scripting XSS in Open User Map = 1.4.46 versions...

CVE-2026-66445

The CVE refers to CVE-2026-66445, describing a Cross Site Scripting (XSS) vulnerability in the WordPress Open User Map plugin, versions

CVE-2026-66434

Contributor Cross Site Scripting XSS in Photonic Gallery & Lightbox for Flickr, SmugMug & Others = 3.33 versions...

CVE-2026-66434 WordPress Photonic Gallery & Lightbox for Flickr, SmugMug & Others plugin <= 3.33 - Cross Site Scripting (XSS) vulnerability

Contributor Cross Site Scripting XSS in Photonic Gallery & Lightbox for Flickr, SmugMug & Others = 3.33 versions...

EUVD-2026-49243

Contributor Cross Site Scripting XSS in Photonic Gallery & Lightbox for Flickr, SmugMug & Others = 3.33 versions...

CVE-2026-66434

Photonic Gallery & Lightbox for Flickr, SmugMug & Others WordPress plugin ≤ 3.33 is affected by a Cross Site Scripting (XSS) vulnerability. CVSSv3.1 base score 6.5 (MEDIUM) with network access, low privileges, user interaction required. Root cause and remediation details are not provided in the d...

CVE-2026-66433

Contributor Cross Site Scripting XSS in Location Weather = 3.0.6 versions...

CVE-2026-66433 WordPress Location Weather plugin <= 3.0.6 - Cross Site Scripting (XSS) vulnerability

Contributor Cross Site Scripting XSS in Location Weather = 3.0.6 versions...

EUVD-2026-49242

Contributor Cross Site Scripting XSS in Location Weather = 3.0.6 versions...

CVE-2026-66433

CVE-2026-66433 affects the WordPress plugin Location Weather (versions &lt;= 3.0.6). The vulnerability is a Cross Site Scripting (XSS) issue in that plugin/version. The CVE entry identifies the affected software, with a medium overall risk (CVSS 3.1 base score 6.5) from Patchstack data, noting ne...

CVE-2026-65563

Author Cross Site Scripting XSS in Orbit Fox by ThemeIsle = 3.0.7 versions...

CVE-2026-65562

Contributor Cross Site Scripting XSS in BetterDocs = 4.6.2 versions...

CVE-2026-65562

CVE-2026-65562 is tied to the WordPress BetterDocs plugin (versions ≤ 4.6.2) and is described as a Cross Site Scripting (XSS) vulnerability. The connected sources confirm the affected product and vulnerability type, with a CVSSv3.1 base score of 6.5 (Medium) indicating low to moderate impact and ...

CVE-2026-65563 WordPress Orbit Fox by ThemeIsle plugin <= 3.0.7 - Cross Site Scripting (XSS) vulnerability

Author Cross Site Scripting XSS in Orbit Fox by ThemeIsle = 3.0.7 versions...

CVE-2026-65563

CVE-2026-65563 concerns a Cross Site Scripting (XSS) vulnerability in the WordPress Orbit Fox by ThemeIsle plugin, versioned

EUVD-2026-49235

Contributor Cross Site Scripting XSS in BetterDocs = 4.6.2 versions...

EUVD-2026-49236

Author Cross Site Scripting XSS in Orbit Fox by ThemeIsle = 3.0.7 versions...

CVE-2026-65562 WordPress BetterDocs plugin <= 4.6.2 - Cross Site Scripting (XSS) vulnerability

Contributor Cross Site Scripting XSS in BetterDocs = 4.6.2 versions...

CVE-2026-65561

Contributor Cross Site Scripting XSS in WordPress Social Login and Register = 7.8.0 versions...