CVE-2026-119365 WordPress Media Player Addons for Elementor – Media Player widget for WP plugin <= 1.1.10 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in bPlugins Media Player Addons for Elementor – Media Player widget for WP media-player-addons-for-elementor allows Stored XSS.This issue affects Media Player Addons for Elementor – Media Player widge...

CVE-2026-119365

The Media Player Addons for Elementor – Media Player widget for WP plugin for WordPress (versions

CVE-2026-119365 WordPress Media Player Addons for Elementor – Media Player widget for WP plugin <= 1.1.10 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in bPlugins Media Player Addons for Elementor – Media Player widget for WP media-player-addons-for-elementor allows Stored XSS.This issue affects Media Player Addons for Elementor – Media Player widge...

CVE-2026-114534

Improper Neutralization of Input During Web Page Generation "Cross-site Scripting" vulnerability in Drupal Block Attributes allows Stored XSS. This issue affects Block Attributes versions: from 0.0.0 to 2.1.0...

CVE-2026-114531

Improper Neutralization of Input During Web Page Generation "Cross-site Scripting" vulnerability in Drupal Swiper formatter allows Stored XSS. This issue affects Swiper formatter versions: from 0.0.0 to 2.1.2, from 3.0.1 to 3.1.0...

CVE-2026-107260

Improper Neutralization of Input During Web Page Generation "Cross-site Scripting" vulnerability in Drupal Sector Distribution allows Stored XSS. This issue affects Sector Distribution versions: from 0.0.0 to 10.3.3, from 10.4.0 to 10.4.2...

EUVD-2026-113571

Improper Neutralization of Input During Web Page Generation "Cross-site Scripting" vulnerability in Drupal Leaflet allows Stored XSS. This issue affects Leaflet versions: from 0.0.0 to 10.4.13...

CVE-2026-114528

The ZeroPoint theme for Drupal (versions 0.0.0 to 1.30.0 and 2.0.0 to 2.0.1 ) is vulnerable to a Stored Cross-site Scripting (XSS) flaw. The root cause is the improper sanitization of menu link titles before they are inserted into HTML class attributes . Exploitation requires the attacker to have...

EUVD-2026-113546

Improper Neutralization of Input During Web Page Generation "Cross-site Scripting" vulnerability in Drupal CSV Field allows Stored XSS. This issue affects CSV Field versions: from 0.0.0 to 2.0.10, from 3.0.0 to 3.0.7...

CVE-2026-114529

The CSV Field module for Drupal is vulnerable to a Stored Cross-site Scripting (XSS) vulnerability in versions 0.0.0 to 2.0.10 and 3.0.0 to 3.0.7 . The root cause is the failure to sufficiently escape CSV cell and header values before they are passed to the DataTables library . This allows an att...

EUVD-2026-113544

Improper Neutralization of Input During Web Page Generation "Cross-site Scripting" vulnerability in Drupal Swiper formatter allows Stored XSS. This issue affects Swiper formatter versions: from 0.0.0 to 2.1.2, from 3.0.1 to 3.1.0...

CVE-2026-114534

The Drupal Block Attributes module (versions 0.0.0 to 2.1.0 ) is vulnerable to Stored Cross-Site Scripting (XSS) due to insufficient sanitization of custom attributes. An attacker can inject malicious scripts into block attributes, though the risk is mitigated by the requirement for the administe...

EUVD-2026-113540

Improper Neutralization of Input During Web Page Generation "Cross-site Scripting" vulnerability in Drupal Block Attributes allows Stored XSS. This issue affects Block Attributes versions: from 0.0.0 to 2.1.0...

CVE-2026-114555 Data field - Moderately critical - Cross site scripting - SA-CONTRIB-2026-250

Improper Neutralization of Input During Web Page Generation "Cross-site Scripting" vulnerability in Drupal Data field allows Stored XSS. This issue affects Data field versions: from 0.0.0 to 2.0.14...

EUVD-2026-113522

Improper Neutralization of Input During Web Page Generation "Cross-site Scripting" vulnerability in Drupal Data field allows Stored XSS. This issue affects Data field versions: from 0.0.0 to 2.0.14...

CVE-2026-119365: bPlugins Media Player Addons for Elementor – Media Player widget for WP: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in bPlugins Media…

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in bPlugins Media Player Addons for Elementor – Media Player widget for WP media-player-addons-for-elementor allows Stored XSS.This issue affects Media Player Addons for Elementor – Media Player widge...

PT-2026-133612

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Creative Themes Blocksy Companion blocksy-companion allows Stored XSS.This issue affects Blocksy Companion: from n/a through 2.1.60...

CVE-2026-116850 WordPress Happy Addons for Elementor plugin <= 3.50.1 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in weDevs Happy Addons for Elementor happy-elementor-addons allows Stored XSS.This issue affects Happy Addons for Elementor: from n/a through 3.50.1...

CVE-2026-39742 WordPress Gutenberg Blocks by Kadence Blocks plugin <= 3.8.0.2 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Liquid Web / StellarWP Gutenberg Blocks by Kadence Blocks kadence-blocks allows Stored XSS.This issue affects Gutenberg Blocks by Kadence Blocks: from n/a through 3.8.0.2...

EUVD-2026-112738

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in PluginUs.Net TableOn posts-table-filterable allows Reflected XSS.This issue affects TableOn: from n/a through 1.0.7...