CVE-2026-66711: Improper Neutralization of Input During Web Page Generation

Subscriber Cross Site Scripting XSS in WooCommerce Multilingual & Multicurrency = 5.5.6 versions...

CVE-2026-66707: Improper Neutralization of Input During Web Page Generation

Unauthenticated Cross Site Scripting XSS in Facebook for WooCommerce = 3.7.5 versions...

CVE-2026-66703: Improper Neutralization of Input During Web Page Generation

Contributor Cross Site Scripting XSS in MailOptin = 1.2.78.0 versions...

CVE-2026-66664: Improper Neutralization of Input During Web Page Generation

Unauthenticated Cross Site Scripting XSS in SEO Plugin by Squirrly SEO = 14.2.0 versions...

CVE-2026-66439: Improper Neutralization of Input During Web Page Generation

Unauthenticated Cross Site Scripting XSS in Advanced AJAX Product Filters = 3.2.0.3 versions...

CVE-2026-65565: Improper Neutralization of Input During Web Page Generation

Unauthenticated Cross Site Scripting XSS in Survey Maker = 5.2.3.3 versions...

CVE-2026-65545: Improper Neutralization of Input During Web Page Generation

Unauthenticated Cross Site Scripting XSS in AI Engine = 3.6.8 versions...

CVE-2026-65517: Improper Neutralization of Input During Web Page Generation

Unauthenticated Cross Site Scripting XSS in Easy PayPal Buy Now Button = 2.0.4 versions...

CVE-2026-65513: Improper Neutralization of Input During Web Page Generation

Unauthenticated Cross Site Scripting XSS in Simply Schedule Appointments = 1.6.12.10 versions...

CVE-2026-65509: Improper Neutralization of Input During Web Page Generation

Unauthenticated Cross Site Scripting XSS in wpDataTables = 7.5.1 versions...

CVE-2026-61959: Improper Neutralization of Input During Web Page Generation

Subscriber Cross Site Scripting XSS in Business Directory = 6.4.24 versions...

CVE-2026-28179: Improper Neutralization of Input During Web Page Generation

Shop manager Cross Site Scripting XSS in FiboSearch = 1.33.0 versions...

CVE-2026-28178: Improper Neutralization of Input During Web Page Generation

Contributor Cross Site Scripting XSS in Powerkit = 3.1.0 versions...

CVE-2026-28143: Improper Neutralization of Input During Web Page Generation

Unauthenticated Cross Site Scripting XSS in Forminator = 1.56.0 versions...

CVE-2026-28141: Improper Neutralization of Input During Web Page Generation

Unauthenticated Cross Site Scripting XSS in NextGEN Gallery = 4.2.3 versions...

CVE-2026-28082: Improper Neutralization of Input During Web Page Generation

Unauthenticated Cross Site Scripting XSS in JetEngine = 3.8.13.1 versions...

PT-2026-68504

Name of the Vulnerable Software and Affected Versions JetEngine versions prior to 3.8.13.2 Description An unauthenticated Cross Site Scripting XSS issue exists, which allows an attacker to execute malicious scripts in the browser of a user without requiring prior authentication. Recommendations...

PT-2026-68604

Name of the Vulnerable Software and Affected Versions WooCommerce Multilingual & Multicurrency versions prior to 5.5.7 Description Cross Site Scripting XSS allows users with Subscriber privileges to execute malicious scripts in the browser of other users. Recommendations Update to a version newer...

PT-2026-71536

Name of the Vulnerable Software and Affected Versions GeekyBot versions prior to 1.2.7 Description Stored Cross-Site Scripting occurs due to insufficient input sanitization and output escaping. This allows unauthenticated attackers to inject arbitrary web scripts into pages, which execute when a...

CVE-2026-61963: Improper Neutralization of Input During Web Page Generation

Unauthenticated Cross Site Scripting XSS in Media LIbrary Assistant = 3.38 versions...