1133012 matches found
CVE-2026-81771
Unauthenticated Cross Site Scripting XSS in TrustedSite = 1.2.5 versions...
CVE-2026-81775
Unauthenticated Cross Site Scripting XSS in Estatik = 4.3.4 versions...
CVE-2026-81770
Unauthenticated Cross Site Scripting XSS in Interactive Geo Maps = 1.6.30 versions...
CVE-2026-83562
Contributor Cross Site Scripting XSS in WCFM Marketplace = 3.8.2 versions...
CVE-2026-81288
Unauthenticated Cross Site Scripting XSS in Upsell Order Bump Offer for WooCommerce = 3.1.5 versions...
CVE-2026-81289
Unauthenticated Cross Site Scripting XSS in MP3 Audio Player for Music, Radio & Podcast by Sonaar = 5.13.1 versions...
WordPress Ninja Forms File Uploads Extension plugin <= 3.3.26 - Cross Site Scripting (XSS) vulnerability
Cross Site Scripting XSS vulnerability discovered by Marc-André Beaulieu h3dg3h0g in WordPress Plugin Ninja Forms File Uploads Extension versions = 3.3.26...
WordPress BP Better Messages plugin <= 2.15.27 - Cross Site Scripting (XSS) vulnerability
Cross Site Scripting XSS vulnerability discovered by daroo in WordPress Plugin BP Better Messages versions = 2.15.27...
WordPress Product Variations Swatches for WooCommerce plugin <= 1.1.18 - Cross Site Scripting (XSS) vulnerability
Cross Site Scripting XSS vulnerability discovered by Roll in WordPress Plugin Product Variations Swatches for WooCommerce versions = 1.1.18...
CVE-2026-83562 WordPress WCFM Marketplace plugin <= 3.8.2 - Cross Site Scripting (XSS) vulnerability
Contributor Cross Site Scripting XSS in WCFM Marketplace = 3.8.2 versions...
EUVD-2026-69934
Contributor Cross Site Scripting XSS in WCFM Marketplace = 3.8.2 versions...
CVE-2026-83562
CVE-2026-83562 is a Contributor Cross Site Scripting (XSS) vulnerability in the WordPress plugin WCFM Marketplace (versions ≤ 3.8.2 ). Discovered by Ananda Dhakal via Patchstack, the flaw requires an authenticated contributor-level user and user interaction to exploit, but results in a changed sc...
CVE-2026-83562 WordPress WCFM Marketplace plugin <= 3.8.2 - Cross Site Scripting (XSS) vulnerability
Contributor Cross Site Scripting XSS in WCFM Marketplace = 3.8.2 versions...
EUVD-2026-69932
Unauthenticated Cross Site Scripting XSS in Estatik = 4.3.4 versions...
CVE-2026-81775 WordPress Estatik plugin <= 4.3.4 - Cross Site Scripting (XSS) vulnerability
Unauthenticated Cross Site Scripting XSS in Estatik = 4.3.4 versions...
CVE-2026-81775
CVE-2026-81775 affects the WordPress Estatik plugin, versions 4.3.4 and below . The vulnerability is an unauthenticated Cross-Site Scripting (XSS) flaw, meaning an attacker can inject malicious scripts without prior authentication. The CVSS 3.1 score is 7.1 (HIGH) with the vector AV:N/AC:L/PR:N/U...
CVE-2026-81775 WordPress Estatik plugin <= 4.3.4 - Cross Site Scripting (XSS) vulnerability
Unauthenticated Cross Site Scripting XSS in Estatik = 4.3.4 versions...
CVE-2026-81771
Unauthenticated Cross-Site Scripting (XSS) was identified in the WordPress TrustedSite plugin , affecting versions 1.2.5 and earlier . The flaw allows an unauthenticated attacker to inject script that executes in the context of a different site (scope changed), with low impact on confidentiality,...