1163257 matches found
EUVD-2026-70564
Unauthenticated Cross Site Scripting XSS in Ninja Forms File Uploads Extension = 3.3.26 versions...
CVE-2026-81776 WordPress WP QuickLaTeX plugin <= 3.8.8 - Cross Site Scripting (XSS) vulnerability
Unauthenticated Cross Site Scripting XSS in WP QuickLaTeX = 3.8.8 versions...
CVE-2026-81300 WordPress Calculation For Contact Form 7 plugin <= 1.0 - Cross Site Scripting (XSS) vulnerability
Unauthenticated Cross Site Scripting XSS in Calculation For Contact Form 7 = 1.0 versions...
EUVD-2026-70593
Unauthenticated Cross Site Scripting XSS in Calculation For Contact Form 7 = 1.0 versions...
CVE-2026-81300
CVE-2026-81300 is an unauthenticated Cross Site Scripting (XSS) vulnerability affecting the Calculation For Contact Form 7 WordPress plugin in versions ≤ 1.0 . The CVSS v3.1 score is 7.1 (HIGH) with a vector of AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L, indicating a network-based attack with low comple...
CVE-2026-81295 WordPress Under Construction plugin <= 5.82 - Cross Site Scripting (XSS) vulnerability
Unauthenticated Cross Site Scripting XSS in Under Construction = 5.82 versions...
CVE-2026-81295 WordPress Under Construction plugin <= 5.82 - Cross Site Scripting (XSS) vulnerability
Unauthenticated Cross Site Scripting XSS in Under Construction = 5.82 versions...
CVE-2026-81295
CVE-2026-81295 affects the WordPress Under Construction plugin (versions ≤ 5.82 ) with an unauthenticated Cross-Site Scripting (XSS) flaw, as identified by Patchstack. The CVSS 3.1 score is 7.1 (HIGH) with the vector AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L, indicating a network-based attack with low ...
EUVD-2026-70562
Unauthenticated Cross Site Scripting XSS in Under Construction = 5.82 versions...
EUVD-2026-70594
Unauthenticated Cross Site Scripting XSS in Simple Payment = 2.5.1 versions...
CVE-2026-81292 WordPress Simple Payment plugin <= 2.5.1 - Cross Site Scripting (XSS) vulnerability
Unauthenticated Cross Site Scripting XSS in Simple Payment = 2.5.1 versions...
CVE-2026-81292
WordPress Simple Payment plugin versions ≤ 2.5.1 are affected by an unauthenticated Cross Site Scripting (XSS) vulnerability, as reported by Patchstack. The flaw requires user interaction but no prior authentication, and operates over the network with low complexity. The CVSS 3.1 base score is 7....
CVE-2026-81292 WordPress Simple Payment plugin <= 2.5.1 - Cross Site Scripting (XSS) vulnerability
Unauthenticated Cross Site Scripting XSS in Simple Payment = 2.5.1 versions...
CVE-2026-81281 WordPress Graphene theme <= 2.9.4 - Cross Site Scripting (XSS) vulnerability
Subscriber Cross Site Scripting XSS in Graphene = 2.9.4 versions...
CVE-2026-81282 WordPress Product Variations Swatches for WooCommerce plugin <= 1.1.18 - Cross Site Scripting (XSS) vulnerability
Subscriber Cross Site Scripting XSS in Product Variations Swatches for WooCommerce = 1.1.18 versions...
CVE-2026-81282 WordPress Product Variations Swatches for WooCommerce plugin <= 1.1.18 - Cross Site Scripting (XSS) vulnerability
Subscriber Cross Site Scripting XSS in Product Variations Swatches for WooCommerce = 1.1.18 versions...
EUVD-2026-70595
Subscriber Cross Site Scripting XSS in Product Variations Swatches for WooCommerce = 1.1.18 versions...
CVE-2026-81281
CVE-2026-81281 is a Cross-Site Scripting (XSS) vulnerability in the Graphene WordPress theme , affecting versions 2.9.4 and earlier . The vulnerability requires a subscriber-level account (low privileges) and user interaction to be exploited. The CVSS v3.1 base score is 6.5 (MEDIUM) with a vector...