CVE-2026-28004: Improper Neutralization of Input During Web Page Generation

Unauthenticated Cross Site Scripting XSS in Business Directory = 6.4.25 versions...

CVE-2026-27539: Improper Neutralization of Input During Web Page Generation

Unauthenticated Cross Site Scripting XSS in Welcart e-Commerce = 2.11.31 versions...

CVE-2026-61974: Improper Neutralization of Input During Web Page Generation

Unauthenticated Cross Site Scripting XSS in Mang Board WP = 2.3.4 versions...

CVE-2026-66655: Improper Neutralization of Input During Web Page Generation

Unauthenticated Cross Site Scripting XSS in MultiParcels Shipping For WooCommerce = 1.30.36 versions...

CVE-2026-66467: Improper Neutralization of Input During Web Page Generation

Subscriber Cross Site Scripting XSS in FluentCommunity = 2.7.5 versions...

CVE-2026-66687: Improper Neutralization of Input During Web Page Generation

Customer Cross Site Scripting XSS in WpBookingly = 1.3.2 versions...

CVE-2026-66471: Improper Neutralization of Input During Web Page Generation

Subscriber Cross Site Scripting XSS in Accordion = 3.0.6 versions...

CVE-2026-66468: Improper Neutralization of Input During Web Page Generation

Unauthenticated Cross Site Scripting XSS in Local Delivery Drivers for WooCommerce = 3.0.0 versions...

CVE-2026-66426: Improper Neutralization of Input During Web Page Generation

Unauthenticated Cross Site Scripting XSS in WP-Stats = 2.56 versions...

PT-2026-71545

Unauthenticated Cross Site Scripting XSS in Agrion = 1.0.0 versions...

PT-2026-71521

Unauthenticated Cross Site Scripting XSS in Blog Floating Button = 1.4.20 versions...

PT-2026-71499

Unauthenticated Cross Site Scripting XSS in MailChimp Subscribe Forms = 4.3.3 versions...

PT-2026-71502

Unauthenticated Cross Site Scripting XSS in Welcart e-Commerce = 2.11.31 versions...

PT-2026-71581

Unauthenticated Cross Site Scripting XSS in MultiParcels Shipping For WooCommerce = 1.30.36 versions...

PT-2026-71508

Unauthenticated Cross Site Scripting XSS in Maspik – Spam blacklist = 2.9.1 versions...

PT-2026-71534

Unauthenticated Cross Site Scripting XSS in WP Full Stripe Free = 8.5.0 versions...

PT-2026-71509

Unauthenticated Cross Site Scripting XSS in Business Directory = 6.4.25 versions...

PT-2026-71600

Author Cross Site Scripting XSS in WP Data Access = 5.5.79 versions...

PT-2026-71524

Unauthenticated Cross Site Scripting XSS in Visitors Traffic Real Time Statistics = 8.11 versions...

PT-2026-71558

Unauthenticated Cross Site Scripting XSS in Geo Mashup = 1.13.18 versions...