CVE-2026-97301

The Cool Formkit Lite WordPress plugin (versions

CVE-2026-97301 WordPress Cool Formkit Lite plugin <= 2.7.8 - Cross Site Scripting (XSS) vulnerability

Contributor Cross Site Scripting XSS in Cool Formkit Lite = 2.7.8 versions...

EUVD-2026-89935

Contributor Cross Site Scripting XSS in Cool Formkit Lite = 2.7.8 versions...

CVE-2026-97301 WordPress Cool Formkit Lite plugin <= 2.7.8 - Cross Site Scripting (XSS) vulnerability

Contributor Cross Site Scripting XSS in Cool Formkit Lite = 2.7.8 versions...

CVE-2026-97298

The King Addons for Elementor WordPress plugin (versions

CVE-2026-97298 WordPress King Addons for Elementor plugin <= 51.1.86 - Cross Site Scripting (XSS) vulnerability

Contributor Cross Site Scripting XSS in King Addons for Elementor = 51.1.86 versions...

CVE-2026-97292 WordPress YITH WooCommerce Tab Manager plugin <= 2.15.0 - Cross Site Scripting (XSS) vulnerability

Author Cross Site Scripting XSS in YITH WooCommerce Tab Manager = 2.15.0 versions...

CVE-2026-97292

The YITH WooCommerce Tab Manager plugin for WordPress versions

CVE-2026-97288

The WordPress OAuth Server plugin, version 4.5.1 and below , is vulnerable to a Cross-Site Scripting (XSS) flaw. The vulnerability is attributed to the Contributor role. While the vulnerability is confirmed, specific technical root causes, exploitation details, or remediation steps are not provid...

CVE-2026-97288 WordPress OAuth Server plugin <= 4.5.1 - Cross Site Scripting (XSS) vulnerability

Contributor Cross Site Scripting XSS in OAuth Server = 4.5.1 versions...

CVE-2026-97286

The Strong Testimonials plugin for WordPress, version 3.3.11 and below , is vulnerable to a Contributor Cross Site Scripting (XSS) flaw. While specific technical root causes are not detailed in the provided documents, the vulnerability allows for potential impact on integrity, confidentiality, an...

CVE-2026-97286 WordPress Strong Testimonials plugin <= 3.3.11 - Cross Site Scripting (XSS) vulnerability

Contributor Cross Site Scripting XSS in Strong Testimonials = 3.3.11 versions...

EUVD-2026-89927

Contributor Cross Site Scripting XSS in Strong Testimonials = 3.3.11 versions...

CVE-2026-97279

The Polylang plugin for WordPress versions

CVE-2026-97279 WordPress Polylang plugin <= 3.8.9 - Cross Site Scripting (XSS) vulnerability

Contributor Cross Site Scripting XSS in Polylang = 3.8.9 versions...

CVE-2026-97271

The WPFunnels WordPress plugin, version 3.13.1 and below , is vulnerable to an unauthenticated Cross Site Scripting (XSS) vulnerability. Technical details regarding the specific component or root cause are not provided in the documents. The CVSS 3.1 score is 7.1 (High) , with a vector of CVSS:3.1...

CVE-2026-97270 WordPress CMB2 plugin <= 2.13.0 - Cross Site Scripting (XSS) vulnerability

Subscriber Cross Site Scripting XSS in CMB2 = 2.13.0 versions...

CVE-2026-97270 WordPress CMB2 plugin <= 2.13.0 - Cross Site Scripting (XSS) vulnerability

Subscriber Cross Site Scripting XSS in CMB2 = 2.13.0 versions...

CVE-2026-97266

The Virtue/Ascend/Pinnacle Toolkit plugin for WordPress is vulnerable to a Cross Site Scripting (XSS) vulnerability in versions

CVE-2026-97266 WordPress Virtue/Ascend/Pinnacle Toolkit plugin <= 4.9.12.1 - Cross Site Scripting (XSS) vulnerability

Contributor Cross Site Scripting XSS in Virtue/Ascend/Pinnacle Toolkit = 4.9.12.1 versions...