CVE-2026-94158: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in bkninja Gloria Admin Panel gloria-admin-panel allows Reflected XSS.This issue affects Gloria Admin Panel: from n/a through 1.3...

PT-2026-108830

Name of the Vulnerable Software and Affected Versions UsersWP versions prior to 1.2.74 Description UsersWP contains a Reflected Cross-site Scripting XSS flaw, which occurs when an application includes untrusted data in a web page without proper validation or encoding, allowing an attacker to...

PT-2026-108829

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Stiofan BlockStrap Page Builder - Bootstrap Blocks blockstrap-page-builder-blocks allows Reflected XSS.This issue affects BlockStrap Page Builder - Bootstrap Blocks: from n/a through 0.1.58...

PT-2026-108845

Name of the Vulnerable Software and Affected Versions PluginUs.Net HUSKY woocommerce-products-filter versions prior to 1.4.3.3 Description Improper neutralization of input during web page generation leads to Reflected Cross-site Scripting XSS, a flaw where an application includes untrusted data i...

CVE-2026-94415: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Muffingroup Betheme betheme allows Reflected XSS.This issue affects Betheme: from n/a through 28.5.8...

CVE-2026-96761: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Welcart Welcart e-Commerce usc-e-shop allows Reflected XSS.This issue affects Welcart e-Commerce: from n/a through 2.12.3...

CVE-2026-96553: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Damian Góra FiboSearch ajax-search-for-woocommerce allows Reflected XSS.This issue affects FiboSearch: from n/a through 1.34.1...

PT-2026-108824

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Extend Themes Kubio AI Page Builder kubio allows Reflected XSS.This issue affects Kubio AI Page Builder: from n/a through 2.9.3...

PT-2026-108839

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in e4jvikwp VikBooking Hotel Booking Engine & PMS vikbooking allows Reflected XSS.This issue affects VikBooking Hotel Booking Engine & PMS: from n/a through 1.8.14...

PT-2026-108901

Name of the Vulnerable Software and Affected Versions Bracketweb Voldor versions prior to 1.0.0 Description Bracketweb Voldor is subject to Reflected Cross-site Scripting XSS, which occurs when an application includes untrusted data in a web page without proper validation or encoding, allowing an...

PT-2026-108840

Name of the Vulnerable Software and Affected Versions ShopBuilder – Elementor WooCommerce Builder Addons versions prior to 3.4.2 Description ShopBuilder – Elementor WooCommerce Builder Addons contains a Reflected Cross-site Scripting XSS flaw. This occurs due to improper neutralization of input...

CVE-2026-94641: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Stiofan UsersWP userswp allows Reflected XSS.This issue affects UsersWP: from n/a through 1.2.73...

PT-2026-108825

🚨 CVE-2026-94170 Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Heateor Support Sassy Social Share sassy-social-share allows Reflected XSS.This issue affects Sassy Social Share: from n/a through 3.3.79. 🎖@cveNotify...

PT-2026-108864

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Welcart Welcart e-Commerce usc-e-shop allows Reflected XSS.This issue affects Welcart e-Commerce: from n/a through 2.12.3...

PT-2026-108823

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in UpSolution UpSolution Core us-core allows Reflected XSS.This issue affects UpSolution Core: from n/a through 8.44...

PT-2026-108822

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in ThemeGoods Grand Restaurant grandrestaurant allows Reflected XSS.This issue affects Grand Restaurant: from n/a before 7.0.11...

PT-2026-108900

Name of the Vulnerable Software and Affected Versions Ogency versions prior to 1.0.0 Description Ogency contains an issue involving improper neutralization of input during web page generation, which allows for Reflected Cross-site Scripting XSS. Reflected XSS occurs when an application includes...

PT-2026-108861

Name of the Vulnerable Software and Affected Versions FiboSearch versions prior to 1.34.2 Description Improper neutralization of input during web page generation allows Reflected Cross-site Scripting XSS, a flaw where malicious scripts are reflected off a web application to the victim's browser...

PT-2026-108913

Name of the Vulnerable Software and Affected Versions ThemeREX Education Center versions prior to 3.6.13 Description ThemeREX Education Center contains an issue involving improper neutralization of input during web page generation, which allows Reflected Cross-site Scripting XSS. Reflected XSS...

PT-2026-108820

🚨 CVE-2026-94158 Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in bkninja Gloria Admin Panel gloria-admin-panel allows Reflected XSS.This issue affects Gloria Admin Panel: from n/a through 1.3. 🎖@cveNotify...