org.elasticsearch.plugin:x-pack-esql (>=9.5.0, <=9.5.4), org.elasticsearch.plugin:x-pack-esql-compute (>=9.5.0, <=9.5.4) +4 more potentially affected by CVE-2026-102409 via org.elasticsearch:elasticsearch (>=9.5.0, <=9.5.4)

org.elasticsearch:elasticsearch MAVEN version =9.5.0, =9.5.0, =9.5.0, =9.5.0, =9.5.0, =9.5.0, =9.5.4 - pl.allegro.tech.elasticsearch.plugin:elasticsearch-analysis-morfologik 9.5.3 Source cves: CVE-2026-102409 Source advisory: SNYK:JAVA-ORGELASTICSEARCH-20937078...

org.elasticsearch.plugin:x-pack-esql (>=9.5.0, <=9.5.4), org.elasticsearch.plugin:x-pack-esql-compute (>=9.5.0, <=9.5.4) +4 more potentially affected by CVE-2026-102404 via org.elasticsearch:elasticsearch (>=9.5.0, <=9.5.4)

org.elasticsearch:elasticsearch MAVEN version =9.5.0, =9.5.0, =9.5.0, =9.5.0, =9.5.0, =9.5.0, =9.5.4 - pl.allegro.tech.elasticsearch.plugin:elasticsearch-analysis-morfologik 9.5.3 Source cves: CVE-2026-102404 Source advisory: SNYK:JAVA-ORGELASTICSEARCH-20937080...

org.elasticsearch.plugin:x-pack-esql (>=9.4.0, <=9.4.3), org.elasticsearch.plugin:x-pack-esql-compute (>=9.4.0, <=9.4.3) +4 more potentially affected by CVE-2026-102407 via org.elasticsearch:elasticsearch (>=9.4.0, <=9.4.3)

org.elasticsearch:elasticsearch MAVEN version =9.4.0, =9.4.0, =9.4.0, =9.4.0, =9.4.0, =9.4.0, =9.4.3 - pl.allegro.tech.elasticsearch.plugin:elasticsearch-analysis-morfologik 9.4.2 Source cves: CVE-2026-102407 Source advisory: SNYK:JAVA-ORGELASTICSEARCH-20937083...

org.elasticsearch.plugin:x-pack-esql (>=9.5.0, <=9.5.4), org.elasticsearch.plugin:x-pack-esql-compute (>=9.5.0, <=9.5.4) +4 more potentially affected by CVE-2026-102408 via org.elasticsearch:elasticsearch (>=9.5.0, <=9.5.4)

org.elasticsearch:elasticsearch MAVEN version =9.5.0, =9.5.0, =9.5.0, =9.5.0, =9.5.0, =9.5.0, =9.5.4 - pl.allegro.tech.elasticsearch.plugin:elasticsearch-analysis-morfologik 9.5.3 Source cves: CVE-2026-102408 Source advisory: SNYK:JAVA-ORGELASTICSEARCH-20937150...

org.elasticsearch.plugin:x-pack-esql (>=9.5.0, <=9.5.2), org.elasticsearch.plugin:x-pack-esql-compute (>=9.5.0, <=9.5.2) +3 more potentially affected by CVE-2026-102411 via org.elasticsearch:elasticsearch (>=9.5.0, <=9.5.2)

org.elasticsearch:elasticsearch MAVEN version =9.5.0, =9.5.0, =9.5.0, =9.5.0, =9.5.0, =9.5.0, =9.5.2 Source cves: CVE-2026-102411 Source advisory: SNYK:JAVA-ORGELASTICSEARCH-20937400...

org.elasticsearch.plugin:x-pack-esql (>=9.5.0, <=9.5.4), org.elasticsearch.plugin:x-pack-esql-compute (>=9.5.0, <=9.5.4) +4 more potentially affected by CVE-2026-103009 via org.elasticsearch:elasticsearch (>=9.5.0, <=9.5.4)

org.elasticsearch:elasticsearch MAVEN version =9.5.0, =9.5.0, =9.5.0, =9.5.0, =9.5.0, =9.5.0, =9.5.4 - pl.allegro.tech.elasticsearch.plugin:elasticsearch-analysis-morfologik 9.5.3 Source cves: CVE-2026-103009 Source advisory: SNYK:JAVA-ORGELASTICSEARCH-21243632...

org.elasticsearch.plugin:x-pack-esql (>=9.5.0, <=9.5.1), org.elasticsearch.plugin:x-pack-esql-compute (>=9.5.0, <=9.5.1) +3 more potentially affected by CVE-2026-103006 via org.elasticsearch:elasticsearch (>=9.5.0, <=9.5.1)

org.elasticsearch:elasticsearch MAVEN version =9.5.0, =9.5.0, =9.5.0, =9.5.0, =9.5.0, =9.5.0, =9.5.1 Source cves: CVE-2026-103006 Source advisory: MEND:CVE-2026-103006...

org.elasticsearch.plugin:x-pack-esql (>=9.5.0, <=9.5.2), org.elasticsearch.plugin:x-pack-esql-compute (>=9.5.0, <=9.5.2) +3 more potentially affected by CVE-2026-102411 via org.elasticsearch:elasticsearch (>=9.5.0, <=9.5.2)

org.elasticsearch:elasticsearch MAVEN version =9.5.0, =9.5.0, =9.5.0, =9.5.0, =9.5.0, =9.5.0, =9.5.2 Source cves: CVE-2026-102411 Source advisory: MEND:CVE-2026-102411...

CVE-2026-12380

Improper neutralization of input during web page generation 'cross-site scripting' vulnerability in Akıllı Ticaret Software Technologies Ltd. Co. E-Commerce Pack allows Reflected XSS. This issue affects E-Commerce Pack: through 2026-10-06. NOTE: The vendor was contacted early about this disclosur...

EUVD-2026-93413

Improper neutralization of input during web page generation 'cross-site scripting' vulnerability in Akıllı Ticaret Software Technologies Ltd. Co. E-Commerce Pack allows Reflected XSS. This issue affects E-Commerce Pack: through 2026-10-06. NOTE: The vendor was contacted early about this disclosur...

CVE-2026-12380

A Reflected Cross-Site Scripting (XSS) vulnerability exists in the E-Commerce Pack by Akıllı Ticaret Software Technologies Ltd. Co. due to improper neutralization of input during web page generation. This flaw allows attackers to execute malicious scripts in a user's browser. The issue affects ve...

CVE-2026-12380 Reflected XSS in Akıllı Ticaret's E-Commerce Pack

Improper neutralization of input during web page generation 'cross-site scripting' vulnerability in Akıllı Ticaret Software Technologies Ltd. Co. E-Commerce Pack allows Reflected XSS. This issue affects E-Commerce Pack: through 2026-10-06. NOTE: The vendor was contacted early about this disclosur...

CVE-2026-94675

Unauthenticated Cross Site Scripting XSS in Fluent Forms Pro Add On Pack = 6.2.13 versions...

CVE-2026-94675 WordPress Fluent Forms Pro Add On Pack plugin <= 6.2.13 - Cross Site Scripting (XSS) vulnerability

Unauthenticated Cross Site Scripting XSS in Fluent Forms Pro Add On Pack = 6.2.13 versions...

CVE-2026-94675 WordPress Fluent Forms Pro Add On Pack plugin <= 6.2.13 - Cross Site Scripting (XSS) vulnerability

Unauthenticated Cross Site Scripting XSS in Fluent Forms Pro Add On Pack = 6.2.13 versions...

EUVD-2026-93065

Unauthenticated Cross Site Scripting XSS in Fluent Forms Pro Add On Pack = 6.2.13 versions...

CVE-2026-94675

The Fluent Forms Pro Add On Pack plugin for WordPress is vulnerable to an unauthenticated Cross-Site Scripting (XSS) vulnerability in versions

PT-2026-106720

Improper neutralization of input during web page generation 'cross-site scripting' vulnerability in Akıllı Ticaret Software Technologies Ltd. Co. E-Commerce Pack allows Reflected XSS. This issue affects E-Commerce Pack: through 2026-10-06. NOTE: The vendor was contacted early about this disclosur...

CVE-2026-12380: Improper Neutralization of Input During Web Page Generation

Improper neutralization of input during web page generation 'cross-site scripting' vulnerability in Akıllı Ticaret Software Technologies Ltd. Co. E-Commerce Pack allows Reflected XSS. This issue affects E-Commerce Pack: through 2026-10-06. NOTE: The vendor was contacted early about this disclosur...

CVE-2026-94675: Improper Neutralization of Input During Web Page Generation

Unauthenticated Cross Site Scripting XSS in Fluent Forms Pro Add On Pack = 6.2.13 versions...