CVE-2026-65539

The advisory concerns CVE-2026-65539: Unauthenticated CSRF in WordPress Kwayy HTML Sitemap plugin version

CVE-2026-65538

CVE-2026-65538 : WordPress Machete plugin ≤ 5.2 contains a Cross Site Scripting (XSS) vulnerability in the author context. The CVSS v3.1 base score is 5.9 (Medium) with vector CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:L. The provided documents do not specify the exact vulnerable component, explo...

EUVD-2026-48139

Author Cross Site Scripting XSS in Machete = 5.2 versions...

CVE-2026-65538 WordPress Machete plugin <= 5.2 - Cross Site Scripting (XSS) vulnerability

Author Cross Site Scripting XSS in Machete = 5.2 versions...

CVE-2026-65538

Author Cross Site Scripting XSS in Machete = 5.2 versions...

CVE-2026-65533

The CVE-2026-65533 entry concerns the WordPress Smart SEO Tool plugin, affected version family is

EUVD-2026-48134

Contributor Cross Site Scripting XSS in Smart SEO Tool = 4.1.2 versions...

CVE-2026-65534

CVE-2026-65534 concerns the WordPress plugin "Custom links in Elementor Image Carousel" (versions

EUVD-2026-48135

Author Cross Site Scripting XSS in Custom links in Elementor Image Carousel = 1.1.1 versions...

EUVD-2026-48129

Contributor Cross Site Scripting XSS in BSK PDF Manager = 3.8 versions...

CVE-2026-65528

The CVE-2026-65528 entry concerns the WordPress BSK PDF Manager plugin (versions up to 3.8) with a Cross Site Scripting (XSS) vulnerability. The root cause is XSS in this plugin version, affecting the product where user input is not properly sanitized. The documents do not provide details on the ...

CVE-2026-65527

The CVE-2026-65527 entry covers a Cross Site Scripting (XSS) vulnerability in the WordPress LIQUID SPEECH BALLOON plugin, affected versions

EUVD-2026-48128

Contributor Cross Site Scripting XSS in LIQUID SPEECH BALLOON = 1.2.5 versions...

EUVD-2026-48124

Contributor Cross Site Scripting XSS in Manual - Documentation, Knowledge Base & Education WordPress Theme = 7.5.4 versions...

CVE-2026-65522

The CVE-2026-65522 entry documents a Cross Site Scripting (XSS) vulnerability in the WordPress Manual theme (Documentation, Knowledge Base & Education WordPress Theme) up to version 7.5.4. The description specifies XSS in versions

EUVD-2026-48122

Author Cross Site Scripting XSS in Photo Gallery = 2.7.7.29 versions...

EUVD-2026-48121

Contributor Cross Site Scripting XSS in Accept Donations with PayPal & Stripe = 1.5.5 versions...

CVE-2026-65518

The CVE concerns the WordPress plugin “Accept Donations with PayPal & Stripe” (v &lt;= 1.5.5) and reports a Cross Site Scripting (XSS) vulnerability. Affected product is the WordPress plugin; vulnerability arises from an XSS issue in versions up to 1.5.5 as described in the CVE records. Public re...

CVE-2026-65519

The advisory concerns CVE-2026-65519: a Cross Site Scripting (XSS) vulnerability in the WordPress Photo Gallery plugin, versions up to 2.7.7.29. According to the record, an author context XSS exists in affected releases. The CVSS v3.1 vector is CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L with a ...

CVE-2026-65514

CVE-2026-65514 affects the WordPress plugin Appointment Hour Booking up to version 1.5.86, with a reported Cross Site Scripting (XSS) vulnerability. The CVSS 3.1 base score is 6.5 (Medium); attack vector is network, attack complexity low, privileges required low, and user interaction is required,...