CVE-2026-39750 WordPress StoreGrowth: Smart Sales Booster for WooCommerce | BOGO, Upsells, Direct Checkout, Quick View, Side Cart plugin <= 2.0.6 - Cross Site Scripting (XSS) vulnerability

Unauthenticated Cross Site Scripting XSS in StoreGrowth: Smart Sales Booster for WooCommerce | BOGO, Upsells, Direct Checkout, Quick View, Side Cart = 2.0.6 versions...

CVE-2026-39748

The EduMall theme for WordPress, versions

CVE-2026-39726

The Lumise Product Designer WordPress plugin, versions

CVE-2026-39724 WordPress HTTP Requests Manager plugin <= 1.3.11 - Cross Site Scripting (XSS) vulnerability

Unauthenticated Cross Site Scripting XSS in HTTP Requests Manager = 1.3.11 versions...

CVE-2026-39720

The Mapster WP Maps WordPress plugin (versions

CVE-2026-39722

The WPLMS WordPress theme, specifically versions

CVE-2026-32574 WordPress Smart Forms plugin <= 2.6.104 - Cross Site Scripting (XSS) vulnerability

Unauthenticated Cross Site Scripting XSS in Smart Forms = 2.6.104 versions...

CVE-2026-32572

The WP User Frontend Pro plugin for WordPress (versions

CVE-2026-32572 WordPress WP User Frontend Pro plugin <= 4.2.13 - Cross Site Scripting (XSS) vulnerability

Unauthenticated Cross Site Scripting XSS in WP User Frontend Pro = 4.2.13 versions...

CVE-2026-32571 WordPress Ohio Extra plugin <= 3.6.8 - Cross Site Scripting (XSS) vulnerability

Subscriber Cross Site Scripting XSS in Ohio Extra = 3.6.8 versions...

EUVD-2026-93234

Subscriber Cross Site Scripting XSS in Ohio Extra = 3.6.8 versions...

CVE-2026-32569

The WP Media folder plugin for WordPress (versions

CVE-2026-32569 WordPress WP Media folder plugin <= 6.2.2 - Cross Site Scripting (XSS) vulnerability

Unauthenticated Cross Site Scripting XSS in WP Media folder = 6.2.2 versions...

CVE-2026-105809

A cross-site scripting (XSS) vulnerability exists in SourceCodester Simple Student Information System 1.0 . The flaw is located in the Profile Field Handler component, specifically within the register.php file. Attackers can initiate a remote attack by manipulating the firstname or lastname argum...

CVE-2026-105809 SourceCodester Simple Student Information System Profile Field register.php cross site scripting

A vulnerability was identified in SourceCodester Simple Student Information System 1.0. This issue affects some unknown processing of the file /register.php of the component Profile Field Handler. The manipulation of the argument firstname/lastname leads to cross site scripting. The attack may be...

CVE-2026-105809 SourceCodester Simple Student Information System Profile Field register.php cross site scripting

A vulnerability was identified in SourceCodester Simple Student Information System 1.0. This issue affects some unknown processing of the file /register.php of the component Profile Field Handler. The manipulation of the argument firstname/lastname leads to cross site scripting. The attack may be...

CVE-2026-105808 SourceCodester Simple Student Information System searchresults.php clean cross site scripting

A vulnerability was determined in SourceCodester Simple Student Information System 1.0. This vulnerability affects the function clean of the file searchresults.php. Executing a manipulation of the argument searchbox can lead to cross site scripting. The attack can be launched remotely. The exploi...

WordPress Additional Order Filters for WooCommerce plugin <= 1.24 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by Tawatchai Pinsuwan in WordPress Plugin Additional Order Filters for WooCommerce versions = 1.24...

Important: Red Hat Security Advisory: OpenShift Container Platform 4.22.17 security and extras update

Red Hat OpenShift Container Platform release 4.22.17 is now available with updates to packages and images that fix several bugs. This release includes a security update for Red Hat OpenShift Container Platform 4.22. Red Hat Product Security has rated this update as having a security impact of...

Important: Red Hat Security Advisory: OpenShift Container Platform 4.21.36 security and extras update

Red Hat OpenShift Container Platform release 4.21.36 is now available with updates to packages and images that fix several bugs. This release includes a security update for Red Hat OpenShift Container Platform 4.21. Red Hat Product Security has rated this update as having a security impact of...