CVE-2026-110382

The NSquared Simply Schedule Appointments WordPress plugin is vulnerable to a Stored Cross-Site Scripting (XSS) flaw (CWE-79) due to improper neutralization of input during web page generation. This issue affects versions from n/a through 1.6.12.35 . Exploitation details and specific remediation ...

CVE-2026-110897

The PowerPack Lite for Beaver Builder WordPress plugin (affected versions through 1.3.1 ) contains an Improper Neutralization of Input During Web Page Generation vulnerability. This flaw leads to Stored Cross-Site Scripting (XSS) , which can be triggered when the application fails to properly san...

EUVD-2026-103425

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in IdeaBox Creations PowerPack Lite for Beaver Builder powerpack-addon-for-beaver-builder allows Stored XSS.This issue affects PowerPack Lite for Beaver Builder: from n/a through 1.3.1...

CVE-2026-111405

The MapSVG WordPress plugin (versions

CVE-2026-110375

The WordPress Download Monitor plugin (versions

CVE-2026-108175

The PluginUs.Net MDTF wp-meta-data-filter-and-taxonomy-filter WordPress plugin is vulnerable to Stored Cross-Site Scripting (XSS) in versions up to and including 1.4.0 . The root cause is the improper neutralization of input during web page generation . This vulnerability allows an attacker to ex...

CVE-2026-108175 WordPress MDTF plugin <= 1.4.0 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in PluginUs.Net MDTF wp-meta-data-filter-and-taxonomy-filter allows Stored XSS.This issue affects MDTF: from n/a through 1.4.0...

EUVD-2026-102230

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Crocoblock JetSmartFilters jet-smart-filters allows Stored XSS.This issue affects JetSmartFilters: from n/a through 3.8.6...

CVE-2026-109702 WordPress Social Share Buttons plugin <= 1.31 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in maxfoundry Social Share Buttons share-button allows Stored XSS.This issue affects Social Share Buttons: from n/a through 1.31...

CVE-2026-105882 WordPress User Registration plugin <= 5.2.8 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in ThemeGrill User Registration user-registration allows Stored XSS.This issue affects User Registration: from n/a through 5.2.8...

CVE-2026-105882

The ThemeGrill User Registration WordPress plugin (versions n/a through 5.2.8 ) is vulnerable to a Stored Cross-Site Scripting (XSS) flaw. The issue stems from the Improper Neutralization of Input During Web Page Generation , which allows an attacker to inject malicious scripts that are stored on...

CVE-2026-105066 WordPress SimplyRETS Real Estate IDX plugin <= 3.2.9 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in SimplyRETS SimplyRETS Real Estate IDX simply-rets allows Reflected XSS.This issue affects SimplyRETS Real Estate IDX: from n/a through 3.2.9...

CVE-2026-89069

Progress MOVEit Transfer contains a Stored Cross-Site Scripting (XSS) vulnerability within the Ad Hoc module caused by improper neutralization of input during web page generation. This issue affects versions before 2025.1.6 and versions from 2026.0.0 before 2026.0.4 . The vulnerability carries a ...

CVE-2026-107870

The Crocoblock JetEngine WordPress plugin is vulnerable to a DOM-Based Cross-Site Scripting (XSS) vulnerability in versions 3.8.16 and below . The flaw is caused by improper neutralization of input during web page generation. While the specific component or file is not specified, the vulnerabilit...

EUVD-2026-101015

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Crocoblock JetProductTables jet-product-tables allows Reflected XSS.This issue affects JetProductTables: from n/a through 1.2.4...

EUVD-2026-98298

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Griden Responsive Slider responsive-slider allows Stored XSS.This issue affects Responsive Slider: from n/a through 0.1.9...

CVE-2026-54867

The Griden Responsive Slider WordPress plugin (versions 0.1.9 and below ) is vulnerable to Stored Cross-Site Scripting (XSS) . This is caused by the Improper Neutralization of Input During Web Page Generation , allowing an attacker to inject malicious scripts. Exploitation details are not provide...

CVE-2026-54869

The Impress for IDX Broker WordPress plugin (specifically the idx-broker-platinum component) is vulnerable to a Stored Cross-Site Scripting (XSS) vulnerability. This issue is caused by the improper neutralization of input during web page generation . The vulnerability impacts versions from n/a th...

EUVD-2026-98295

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in wpweaver Weaver Xtreme Theme Support weaverx-theme-support allows Stored XSS.This issue affects Weaver Xtreme Theme Support: from n/a through 7.0.1...

EUVD-2026-97305

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Igor Funa Ad Inserter ad-inserter allows Stored XSS.This issue affects Ad Inserter: from n/a through 2.8.18...