1144120 matches found
CVE-2026-66673 WordPress Flatastic theme <= 2.0 - Reflected Cross Site Scripting (XSS) vulnerability
Unauthenticated Cross Site Scripting XSS in Flatastic = 2.0 versions...
EUVD-2026-63300
Unauthenticated Cross Site Scripting XSS in Form Maker by 10Web = 1.15.46 versions...
CVE-2026-66615 WordPress Podlove Podcast Publisher plugin <= 4.5.4 - Cross Site Scripting (XSS) vulnerability
Unauthenticated Cross Site Scripting XSS in Podlove Podcast Publisher = 4.5.4 versions...
CVE-2026-66616 WordPress Form Maker by 10Web plugin <= 1.15.48 - Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in 10Web Form Maker by 10Web form-maker allows Stored XSS.This issue affects Form Maker by 10Web: from n/a through 1.15.48...
EUVD-2026-63299
Unauthenticated Cross Site Scripting XSS in Podlove Podcast Publisher = 4.5.4 versions...
CVE-2026-66615
Podlove Podcast Publisher WordPress plugin versions ≤ 4.5.4 has an unauthenticated reflected/stored XSS flaw (CVSS 7.1 HIGH, network-exploitable, no auth required). No exploitation data is provided. Update to a patched version beyond 4.5.4; see the Patchstack advisory for details.
CVE-2026-66615 WordPress Podlove Podcast Publisher plugin <= 4.5.4 - Cross Site Scripting (XSS) vulnerability
Unauthenticated Cross Site Scripting XSS in Podlove Podcast Publisher = 4.5.4 versions...
CVE-2026-66616
CVE-2026-66616 is an unauthenticated Cross-Site Scripting (XSS) vulnerability in the WordPress plugin Form Maker by 10Web , affecting versions ≤ 1.15.46 . The flaw allows a remote, unauthenticated attacker to inject malicious scripts into the context of a victim's browser, requiring user interact...
CVE-2026-66616 WordPress Form Maker by 10Web plugin <= 1.15.48 - Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in 10Web Form Maker by 10Web form-maker allows Stored XSS.This issue affects Form Maker by 10Web: from n/a through 1.15.48...
CVE-2026-66614
The WordPress SEO Plugin by Squirrly SEO (versions ≤ 14.2.2) contains an unauthenticated reflected/stored XSS vulnerability exploitable via crafted input, with CVSS 3.1 score 7.1 (HIGH). No exploit code or in-the-wild exploitation details are provided in the documents; patch version is not specif...
EUVD-2026-63298
Unauthenticated Cross Site Scripting XSS in SEO Plugin by Squirrly SEO = 14.2.2 versions...
CVE-2026-66614 WordPress SEO Plugin by Squirrly SEO plugin <= 14.2.2 - Cross Site Scripting (XSS) vulnerability
Unauthenticated Cross Site Scripting XSS in SEO Plugin by Squirrly SEO = 14.2.2 versions...
CVE-2026-66611 WordPress Paymob for WooCommerce plugin <= 4.1.10 - Cross Site Scripting (XSS) vulnerability
Unauthenticated Cross Site Scripting XSS in Paymob for WooCommerce = 4.1.10 versions...
CVE-2026-66611 WordPress Paymob for WooCommerce plugin <= 4.1.10 - Cross Site Scripting (XSS) vulnerability
Unauthenticated Cross Site Scripting XSS in Paymob for WooCommerce = 4.1.10 versions...
CVE-2026-66612
Unauthenticated reflected XSS vulnerability in the WordPress Aora theme (versions ≤ 1.3.19), exploitable via a crafted link requiring user interaction. CVSS 7.1 HIGH (network, no privileges). No fix version or exploitation details provided; monitor Patchstack advisory for updates.
EUVD-2026-63296
Unauthenticated Cross Site Scripting XSS in Paymob for WooCommerce = 4.1.10 versions...
CVE-2026-66611
CVE-2026-66611 is an unauthenticated Cross-Site Scripting (XSS) vulnerability in the Paymob for WooCommerce WordPress plugin, affecting versions ≤ 4.1.10 . The flaw was discovered by dutafi and rated CVSS 7.1 (HIGH) with a changed scope, indicating an attacker can execute scripts in a different s...
CVE-2026-66612 WordPress Aora theme <= 1.3.19 - Cross Site Scripting (XSS) vulnerability
Unauthenticated Cross Site Scripting XSS in Aora = 1.3.19 versions...