CVE-2026-28003

The CVE-2026-28003 entry describes an unauthenticated Cross Site Scripting (XSS) vulnerability in WordPress Maspik – Spam blacklist plugin, affecting versions up to 2.9.1. The issue is documented with CVSSv3.1 base score 7.1 (HIGH) with NETWORK attack vector, no privileges required, user interact...

CVE-2026-28004

WordPress Business Directory plugin

EUVD-2026-57942

Unauthenticated Cross Site Scripting XSS in Maspik – Spam blacklist = 2.9.1 versions...

CVE-2026-28003

Unauthenticated Cross Site Scripting XSS in Maspik – Spam blacklist = 2.9.1 versions...

CVE-2026-28004 WordPress Business Directory plugin <= 6.4.25 - Cross Site Scripting (XSS) vulnerability

Unauthenticated Cross Site Scripting XSS in Business Directory = 6.4.25 versions...

CVE-2026-28003 WordPress Maspik – Spam blacklist plugin <= 2.9.1 - Cross Site Scripting (XSS) vulnerability

Unauthenticated Cross Site Scripting XSS in Maspik – Spam blacklist = 2.9.1 versions...

EUVD-2026-57937

Unauthenticated Cross Site Scripting XSS in Welcart e-Commerce = 2.11.31 versions...

CVE-2026-27539 WordPress Welcart e-Commerce plugin <= 2.11.31 - Cross Site Scripting (XSS) vulnerability

Unauthenticated Cross Site Scripting XSS in Welcart e-Commerce = 2.11.31 versions...

CVE-2026-27539 WordPress Welcart e-Commerce plugin <= 2.11.31 - Cross Site Scripting (XSS) vulnerability

Unauthenticated Cross Site Scripting XSS in Welcart e-Commerce = 2.11.31 versions...

CVE-2026-27539

CVE-2026-27539 describes an unauthenticated Cross-Site Scripting (XSS) vulnerability in the WordPress Welcart e-Commerce plugin, versions

CVE-2026-27537 WordPress Popup by Supsystic plugin <= 1.11.2 - Cross Site Scripting (XSS) vulnerability

Unauthenticated Cross Site Scripting XSS in Popup by Supsystic = 1.11.2 versions...

EUVD-2026-57935

Unauthenticated Cross Site Scripting XSS in Popup by Supsystic = 1.11.2 versions...

CVE-2026-27537

CVE-2026-27537 affects the WordPress plugin Popup by Supsystic (versions ≤ 1.11.2). The vulnerability is an Unauthenticated Cross Site Scripting (XSS) vulnerability. The CVSS v3.1 base score is 6.5 (MEDIUM) with AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L. The description indicates no authenticated acces...

CVE-2026-27536 WordPress MailChimp Subscribe Forms plugin <= 4.3.3 - Cross Site Scripting (XSS) vulnerability

Unauthenticated Cross Site Scripting XSS in MailChimp Subscribe Forms = 4.3.3 versions...

CVE-2026-27536

The CVE-2026-27536 details an unauthenticated Cross-Site Scripting (XSS) vulnerability in the WordPress MailChimp Subscribe Forms plugin, versions

CVE-2026-27536 WordPress MailChimp Subscribe Forms plugin <= 4.3.3 - Cross Site Scripting (XSS) vulnerability

Unauthenticated Cross Site Scripting XSS in MailChimp Subscribe Forms = 4.3.3 versions...

EUVD-2026-57934

Unauthenticated Cross Site Scripting XSS in MailChimp Subscribe Forms = 4.3.3 versions...

WordPress Knowledge Base for Documentation, FAQs with AI Assistance plugin <= 17.211.0 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by Coopernicus in WordPress Plugin Knowledge Base for Documentation, FAQs with AI Assistance versions = 17.211.0...

WordPress AcyMailing SMTP Newsletter plugin <= 10.11.1 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by Asim Alshaya in WordPress Plugin AcyMailing SMTP Newsletter versions = 10.11.1...

WordPress Visitors Traffic Real Time Statistics plugin <= 8.11 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by Rafie Muhammad in WordPress Plugin Visitors Traffic Real Time Statistics versions = 8.11...