1125846 matches found
CVE-2026-56041
Unauthenticated Cross Site Scripting XSS in Responsive Lightbox = 2.7.6 versions...
CVE-2026-56043
Unauthenticated Cross Site Scripting XSS in Customer Reviews for WooCommerce = 5.110.1 versions...
CVE-2026-56044
Unauthenticated Cross Site Scripting XSS in Blog2Social = 8.9.2 versions...
CVE-2026-56047
Unauthenticated Cross Site Scripting XSS in perfmatters = 2.6.3 versions...
CVE-2026-56040
Unauthenticated Cross Site Scripting XSS in Gutenverse Form = 2.4.7 versions...
CVE-2026-56039
Unauthenticated Cross Site Scripting XSS in Quick Interest Slider = 3.1.6 versions...
CVE-2026-56011
Unauthenticated Cross Site Scripting XSS in MapPress Maps for WordPress = 2.97.3 versions...
CVE-2025-68075
Contributor Cross Site Scripting XSS in BNE Testimonials = 2.0.8 versions...
CVE-2025-68074
Contributor Cross Site Scripting XSS in Image Carousel = 1.0.0.41 versions...
CVE-2026-57656
Author Cross Site Scripting XSS in Hester Core = 1.1.8 versions...
CVE-2026-57656 WordPress Hester Core plugin <= 1.1.8 - Cross Site Scripting (XSS) vulnerability
Author Cross Site Scripting XSS in Hester Core = 1.1.8 versions...
CVE-2026-57656
The affected software is the WordPress plugin Hester Core (versions ≤ 1.1.8). The CVE-2026-57656 entry documents an Author Cross Site Scripting (XSS) vulnerability in Hester Core ≤ 1.1.8. Multiple connected sources (NVD, CVE List, EUVD, Patchstack) corroborate this issue. The provided documents d...
EUVD-2026-39771
Author Cross Site Scripting XSS in Hester Core = 1.1.8 versions...
EUVD-2026-39766
Contributor Cross Site Scripting XSS in Ghost Kit = 3.6.0 versions...
CVE-2026-57651
The CVE-2026-57651 entry documents a Cross Site Scripting (XSS) vulnerability in the WordPress Ghost Kit plugin versions ≤ 3.6.0. The issue is described consistently across sources as Ghost Kit XSS, with a CVSS v3.1 base score of 6.5 (Medium) and an attack vector of Network, user interaction requ...
CVE-2026-57651 WordPress Ghost Kit plugin <= 3.6.0 - Cross Site Scripting (XSS) vulnerability
Contributor Cross Site Scripting XSS in Ghost Kit = 3.6.0 versions...
CVE-2026-57650
CVE-2026-57650: a cross-site scripting (XSS) vulnerability in WordPress Magazine Blocks plugin versions ≤ 1.8.3. The issue is described as a Contributor XSS across the Patchstack/NVD entries. CVSSv3.1 base score 6.5 (Medium): Network attack vector, low attack complexity, low privileges required, ...
EUVD-2026-39765
Contributor Cross Site Scripting XSS in Magazine Blocks = 1.8.3 versions...