CVE-2026-125440

Improper Neutralization of Script-Related HTML Tags in a Web Page Basic XSS vulnerability in Cristián Lávaque s2Member s2member allows Code Injection.This issue affects s2Member: from n/a through 261106...

EUVD-2026-125364

Improper Neutralization of Script-Related HTML Tags in a Web Page Basic XSS vulnerability in eLightUp Slim SEO slim-seo allows Code Injection.This issue affects Slim SEO: from n/a through 4.11.5...

CVE-2026-125821

The MapSVG WordPress plugin (versions

CVE-2026-125821 WordPress MapSVG plugin <= 9.0.4 - Content Injection vulnerability

Improper Neutralization of Script-Related HTML Tags in a Web Page Basic XSS vulnerability in PT Norther Lights Production MapSVG mapsvg-lite-interactive-vector-maps allows Code Injection.This issue affects MapSVG: from n/a through 9.0.4...

EUVD-2026-125362

Improper Neutralization of Script-Related HTML Tags in a Web Page Basic XSS vulnerability in PT Norther Lights Production MapSVG mapsvg-lite-interactive-vector-maps allows Code Injection.This issue affects MapSVG: from n/a through 9.0.4...

CVE-2026-125814 WordPress Product Feed PRO for WooCommerce plugin <= 13.5.8 - Content Injection vulnerability

Improper Neutralization of Script-Related HTML Tags in a Web Page Basic XSS vulnerability in Rymera Web Co Product Feed PRO for WooCommerce woo-product-feed-pro allows Code Injection.This issue affects Product Feed PRO for WooCommerce: from n/a through 13.5.8...

CVE-2026-125814

The Product Feed PRO for WooCommerce plugin (woo-product-feed-pro) by Rymera Web Co is vulnerable to a Content Injection (Basic XSS) vulnerability in versions up to and including 13.5.8 . This issue stems from the Improper Neutralization of Script-Related HTML Tags in a Web Page , allowing for po...

EUVD-2026-124149

Improper Neutralization of Script-Related HTML Tags in a Web Page Basic XSS vulnerability in ExpressTech Quiz And Survey Master quiz-master-next allows Code Injection.This issue affects Quiz And Survey Master: from n/a through 11.3.0...

CVE-2026-125786: ExpressTech Quiz And Survey Master: Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) vulnerability in ExpressTech Quiz And…

Improper Neutralization of Script-Related HTML Tags in a Web Page Basic XSS vulnerability in ExpressTech Quiz And Survey Master quiz-master-next allows Code Injection.This issue affects Quiz And Survey Master: from n/a through 11.3.0...

CVE-2026-124262 WordPress Ad Inserter plugin <= 2.8.19 - Content Injection vulnerability

Improper Neutralization of Script-Related HTML Tags in a Web Page Basic XSS vulnerability in Igor Funa Ad Inserter ad-inserter allows Code Injection.This issue affects Ad Inserter: from n/a through 2.8.19...

EUVD-2026-123390

Improper Neutralization of Script-Related HTML Tags in a Web Page Basic XSS vulnerability in Franky Events Made Easy events-made-easy allows Code Injection.This issue affects Events Made Easy: from n/a through 3.3.5...

CVE-2026-124255 WordPress Events Made Easy plugin <= 3.3.5 - Content Injection vulnerability

Improper Neutralization of Script-Related HTML Tags in a Web Page Basic XSS vulnerability in Franky Events Made Easy events-made-easy allows Code Injection.This issue affects Events Made Easy: from n/a through 3.3.5...

EUVD-2026-123386

Improper Neutralization of Script-Related HTML Tags in a Web Page Basic XSS vulnerability in WP Chill Strong Testimonials strong-testimonials allows Code Injection.This issue affects Strong Testimonials: from n/a through 3.3.17...

CVE-2026-124255: Franky Events Made Easy: Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) vulnerability in Franky Events Made Easy…

Improper Neutralization of Script-Related HTML Tags in a Web Page Basic XSS vulnerability in Franky Events Made Easy events-made-easy allows Code Injection.This issue affects Events Made Easy: from n/a through 3.3.5...

PT-2026-145140

Improper Neutralization of Script-Related HTML Tags in a Web Page Basic XSS vulnerability in Franky Events Made Easy events-made-easy allows Code Injection.This issue affects Events Made Easy: from n/a through 3.3.5...

PT-2026-145208

Improper Neutralization of Script-Related HTML Tags in a Web Page Basic XSS vulnerability in myCred myCred mycred allows Code Injection.This issue affects myCred: from n/a through 4.0.2...

PT-2026-145218

Improper Neutralization of Script-Related HTML Tags in a Web Page Basic XSS vulnerability in ProPluginsLab Back In Stock Notifier for WooCommerce back-in-stock-notifier-for-woocommerce allows Code Injection.This issue affects Back In Stock Notifier for WooCommerce: from n/a through 7.5.2...

CVE-2026-119503

Improper Neutralization of Script-Related HTML Tags in a Web Page Basic XSS vulnerability in Welcart Welcart e-Commerce usc-e-shop allows Code Injection.This issue affects Welcart e-Commerce: from n/a through 2.12.6...

CVE-2026-119503 WordPress Welcart e-Commerce plugin <= 2.12.6 - Content Injection vulnerability

Improper Neutralization of Script-Related HTML Tags in a Web Page Basic XSS vulnerability in Welcart Welcart e-Commerce usc-e-shop allows Code Injection.This issue affects Welcart e-Commerce: from n/a through 2.12.6...

CVE-2026-119503: Welcart Welcart e-Commerce: Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) vulnerability in Welcart Welcart…

Improper Neutralization of Script-Related HTML Tags in a Web Page Basic XSS vulnerability in Welcart Welcart e-Commerce usc-e-shop allows Code Injection.This issue affects Welcart e-Commerce: from n/a through 2.12.6...