CVE-2026-94674

The WordPress Pixel Manager for WooCommerce plugin in versions

CVE-2026-94078 WordPress Site Reviews plugin <= 8.3.1 - Cross Site Scripting (XSS) vulnerability

Unauthenticated Cross Site Scripting XSS in Site Reviews = 8.3.1 versions...

CVE-2026-94078

The Site Reviews WordPress plugin, affecting versions

EUVD-2026-89833

Unauthenticated Cross Site Scripting XSS in Site Reviews = 8.3.1 versions...

CVE-2026-94078 WordPress Site Reviews plugin <= 8.3.1 - Cross Site Scripting (XSS) vulnerability

Unauthenticated Cross Site Scripting XSS in Site Reviews = 8.3.1 versions...

CVE-2026-94077 WordPress Safe SVG plugin <= 2.5.0 - Cross Site Scripting (XSS) vulnerability

Contributor Cross Site Scripting XSS in Safe SVG = 2.5.0 versions...

EUVD-2026-89832

Contributor Cross Site Scripting XSS in Safe SVG = 2.5.0 versions...

CVE-2026-94077 WordPress Safe SVG plugin <= 2.5.0 - Cross Site Scripting (XSS) vulnerability

Contributor Cross Site Scripting XSS in Safe SVG = 2.5.0 versions...

CVE-2026-93770 WordPress WP Statistics plugin <= 14.16.13 - Cross Site Scripting (XSS) vulnerability

Unauthenticated Cross Site Scripting XSS in WP Statistics = 14.16.13 versions...

CVE-2026-62079 WordPress Qi Addons For Elementor plugin <= 1.11 - Cross Site Scripting (XSS) vulnerability

Contributor Cross Site Scripting XSS in Qi Addons For Elementor = 1.11 versions...

CVE-2026-62079

The Qi Addons For Elementor WordPress plugin, affecting versions

CVE-2026-27371 WordPress WPFunnels plugin <= 3.13.1 - Reflected Cross Site Scripting (XSS) vulnerability

Unauthenticated Cross Site Scripting XSS in WPFunnels = 3.13.1 versions...

CVE-2026-62078 WordPress Premium Addons for Elementor plugin <= 4.11.105 - Cross Site Scripting (XSS) vulnerability

Contributor Cross Site Scripting XSS in Premium Addons for Elementor = 4.11.105 versions...

EUVD-2026-89817

Contributor Cross Site Scripting XSS in Premium Addons for Elementor = 4.11.105 versions...

CVE-2026-27371

The WPFunnels plugin for WordPress versions

CVE-2026-62078

The Premium Addons for Elementor WordPress plugin, in versions

CVE-2026-103239

MISP contains a privilege escalation vulnerability in the tag collection creation and editing functionality. The affected actions accepted the full HTTP request payload and passed it to a bulk-association save operation, which writes not only the intended tag collection record but also any...

WordPress CMB2 plugin <= 2.13.0 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by Jorgson in WordPress Plugin CMB2 versions = 2.13.0...

CVE-2026-102586

A flaw was found in Moodle. Insufficient sanitization of username input on the password reset page allows a remote attacker to conduct a cross-site scripting XSS attack. By convincing an unauthenticated user to access a specially crafted password reset link, an attacker could execute arbitrary...

CVE-2026-102588

A flaw was found in Moodle. The XML grade import feature lacks proper Cross-Site Request Forgery CSRF token validation. By tricking an authenticated user with grade management permissions into visiting a malicious webpage, an attacker can trigger unauthorized requests on the victim's behalf. This...