1123916 matches found
CVE-2026-61959 WordPress Business Directory plugin <= 6.4.24 - Cross Site Scripting (XSS) vulnerability
Subscriber Cross Site Scripting XSS in Business Directory = 6.4.24 versions...
CVE-2026-61961
CVE-2026-61961 concerns the WordPress plugin EmbedPress (versions
CVE-2026-61959
The CVE-2026-61959 entry concerns a Cross Site Scripting (XSS) vulnerability in the WordPress Business Directory plugin, affecting versions
EUVD-2026-53956
Subscriber Cross Site Scripting XSS in Business Directory = 6.4.24 versions...
EUVD-2026-53957
Unauthenticated Cross Site Scripting XSS in EmbedPress = 4.5.6 versions...
CVE-2026-28179
CVE-2026-28179 affects the WordPress FiboSearch plugin (versions
EUVD-2026-53950
Contributor Cross Site Scripting XSS in Powerkit = 3.1.0 versions...
CVE-2026-28178
The CVE-2026-28178 entry concerns the WordPress Powerkit plugin, affected versions
CVE-2026-28179 WordPress FiboSearch plugin <= 1.33.0 - Cross Site Scripting (XSS) vulnerability
Shop manager Cross Site Scripting XSS in FiboSearch = 1.33.0 versions...
EUVD-2026-53951
Shop manager Cross Site Scripting XSS in FiboSearch = 1.33.0 versions...
CVE-2026-28178 WordPress Powerkit plugin <= 3.1.0 - Cross Site Scripting (XSS) vulnerability
Contributor Cross Site Scripting XSS in Powerkit = 3.1.0 versions...
EUVD-2026-53949
Unauthenticated Cross Site Scripting XSS in Popup Maker = 1.23.0 versions...
CVE-2026-28177 WordPress Popup Maker plugin <= 1.23.0 - Cross Site Scripting (XSS) vulnerability
Unauthenticated Cross Site Scripting XSS in Popup Maker = 1.23.0 versions...
CVE-2026-28177
Popup Maker WordPress plugin
CVE-2026-28172 WordPress Tracking Code Manager plugin <= 2.6.0 - CSRF to Stored XSS vulnerability
Unauthenticated Cross Site Request Forgery CSRF in Tracking Code Manager = 2.6.0 versions...
EUVD-2026-53944
Unauthenticated Cross Site Scripting XSS in NextGEN Gallery = 4.2.3 versions...
CVE-2026-28141
Summary: CVE-2026-28141 is an Unauthenticated Cross Site Scripting (XSS) vulnerability affecting the WordPress NextGEN Gallery plugin, version
CVE-2026-28143
Forminator plugin for WordPress is affected by CVE-2026-28143: unauthenticated XSS in versions up to and including 1.56.0. The vulnerability arises in the plugin code path handling input that can be crafted by an attacker without authentication. Impact, as described in the sources, is Cross Site ...