CVE-2026-11195

A vulnerability exists in the MHTML component of Google Chrome and Microsoft Edge browsers (prior to version 149.0.7827.53 ) due to a lack of mechanisms for verifying data sources. A remote attacker could trick a user into performing specific UI gestures to view a crafted HTML page, potentially r...

BIT-WORDPRESS-MULTISITE-2021-39202

WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. In affected versions the widgets editor introduced in WordPress 5.8 beta 1 has improper handling of HTML input in the Custom HTML feature. This leads to stored XSS in the cust...

WordPress plugin users: cross-site scripting vulnerabilities

WordPress and WordPress plugin are both products of the WordPress Foundation. WordPress is a set of blogging platforms developed using the PHP language. WordPress plugin is an application plugin. WordPress plugin amr users version 4.59.4 has a cross-site scripting vulnerability that stems from a...