CVE-2026-111848 WordPress Geo Mashup plugin <= 1.13.22 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Dylan Kuhn Geo Mashup geo-mashup allows Reflected XSS.This issue affects Geo Mashup: from n/a through 1.13.22...

CVE-2026-111848

The Geo Mashup WordPress plugin (versions

CVE-2026-107435

The WP Chill Strong Testimonials WordPress plugin is vulnerable to Stored Cross-Site Scripting (XSS) due to the improper neutralization of input during web page generation. This security flaw affects versions from n/a through 3.3.12 . While the vulnerability allows for script execution in the con...

CVE-2026-107435 WordPress Strong Testimonials plugin <= 3.3.12 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in WP Chill Strong Testimonials strong-testimonials allows Stored XSS.This issue affects Strong Testimonials: from n/a through 3.3.12...

CVE-2026-107435 WordPress Strong Testimonials plugin <= 3.3.12 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in WP Chill Strong Testimonials strong-testimonials allows Stored XSS.This issue affects Strong Testimonials: from n/a through 3.3.12...

CVE-2026-112833

The Castos Seriously Simple Podcasting plugin for WordPress (versions n/a through 3.17.0 ) is vulnerable to Stored Cross-Site Scripting (XSS) . This vulnerability stems from the improper neutralization of input during web page generation. An attacker could potentially execute malicious scripts in...

CVE-2026-112833 WordPress Seriously Simple Podcasting plugin <= 3.17.0 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Castos Seriously Simple Podcasting seriously-simple-podcasting allows Stored XSS.This issue affects Seriously Simple Podcasting: from n/a through 3.17.0...

CVE-2026-18205

The Ticimax E-Commerce Platform developed by Ticimax Informatics Technologies Inc. is vulnerable to a Reflected Cross-Site Scripting (XSS) flaw. This issue is caused by the improper neutralization of input during web page generation. An attacker could potentially execute malicious scripts in a us...

CVE-2026-18205 XSS in Ticimax Informatics' Ticimax E-Commerce Platform

Improper neutralization of input during web page generation 'cross-site scripting' vulnerability in Ticimax Informatics Technologies Inc. Ticimax E-Commerce Platform allows Reflected XSS. This issue affects Ticimax E-Commerce Platform: through 2026-09-02...

CVE-2026-111844

The WordPress Brizy plugin version 2.8.23 is vulnerable to a Stored Cross-Site Scripting (XSS) vulnerability. The flaw stems from the improper neutralization of input during web page generation . This vulnerability allows an attacker to execute malicious scripts in the context of a user's browser...

EUVD-2026-104255

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Crocoblock JetElements For Elementor jet-elements allows Stored XSS.This issue affects JetElements For Elementor: from n/a through 2.9.2.4...

CVE-2026-112199 WordPress YITH WooCommerce Wishlist plugin <= 4.18.1 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in YITH YITH WooCommerce Wishlist yith-woocommerce-wishlist allows Stored XSS.This issue affects YITH WooCommerce Wishlist: from n/a through 4.18.1...

CVE-2026-112199

The YITH WooCommerce Wishlist plugin for WordPress (versions

EUVD-2026-104132

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Ays Pro Quiz Maker quiz-maker allows Reflected XSS.This issue affects Quiz Maker: from n/a through 6.7.1.91...

CVE-2026-110379: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Ays Pro Quiz Maker quiz-maker allows Reflected XSS.This issue affects Quiz Maker: from n/a through 6.7.1.91...

CVE-2026-110897

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in IdeaBox Creations PowerPack Lite for Beaver Builder powerpack-addon-for-beaver-builder allows Stored XSS.This issue affects PowerPack Lite for Beaver Builder: from n/a through 1.3.1...

CVE-2026-110897 WordPress PowerPack Lite for Beaver Builder plugin <= 1.3.1 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in IdeaBox Creations PowerPack Lite for Beaver Builder powerpack-addon-for-beaver-builder allows Stored XSS.This issue affects PowerPack Lite for Beaver Builder: from n/a through 1.3.1...

EUVD-2026-103425

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in IdeaBox Creations PowerPack Lite for Beaver Builder powerpack-addon-for-beaver-builder allows Stored XSS.This issue affects PowerPack Lite for Beaver Builder: from n/a through 1.3.1...

CVE-2026-110382 WordPress Simply Schedule Appointments plugin <= 1.6.12.35 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in NSquared Simply Schedule Appointments simply-schedule-appointments allows Stored XSS.This issue affects Simply Schedule Appointments: from n/a through 1.6.12.35...

CVE-2026-110897

The PowerPack Lite for Beaver Builder WordPress plugin (affected versions through 1.3.1 ) contains an Improper Neutralization of Input During Web Page Generation vulnerability. This flaw leads to Stored Cross-Site Scripting (XSS) , which can be triggered when the application fails to properly san...