16282 matches found
CVE-2026-68565 WordPress GeoDirectory plugin <= 2.8.172 - Cross Site Scripting (XSS) vulnerability
Contributor Cross Site Scripting XSS in GeoDirectory = 2.8.172 versions...
EUVD-2026-60934
Contributor Cross Site Scripting XSS in GeoDirectory = 2.8.172 versions...
CVE-2026-68565
Contributor-level XSS in the WordPress GeoDirectory plugin affects versions up to 2.8.172 (CVE description) or 2.8.174 (Patchstack report), exploitable by authenticated users with contributor privileges to inject scripts affecting other users. No patch version or in-the-wild exploitation details ...
CVE-2026-68565
Contributor Cross Site Scripting XSS in GeoDirectory = 2.8.172 versions...
CVE-2026-66646
Contributor Cross Site Scripting XSS in WP Tab Widget = 1.2.11 versions...
CVE-2026-66646 WordPress WP Tab Widget plugin <= 1.2.11 - Cross Site Scripting (XSS) vulnerability
Contributor Cross Site Scripting XSS in WP Tab Widget = 1.2.11 versions...
CVE-2026-66646
The WordPress plugin WP Tab Widget (versions ≤ 1.2.11) contains a contributor-level stored XSS vulnerability: untrusted input is output without sanitization, allowing a contributor to inject scripts that execute in visitors' browsers. CVSS 3.1 scores 6.5 (Medium). CISA SSVC reports no known explo...
CVE-2026-66645 WordPress Table Of Contents Block plugin <= 1.5.0 - Cross Site Scripting (XSS) vulnerability
Contributor Cross Site Scripting XSS in Table Of Contents Block = 1.5.0 versions...
CVE-2026-66645
Contributor Cross Site Scripting XSS in Table Of Contents Block = 1.5.0 versions...
CVE-2026-66645
The WordPress Table Of Contents Block plugin (≤1.5.0) allows authenticated contributors to inject cross-site scripting payloads. CVSS 3.1 scores 6.5 (Medium) with network attack vector and low privileges required. No exploit code or in-the-wild exploitation is documented in the provided materials.
EUVD-2026-60928
Contributor Cross Site Scripting XSS in Typing Effect = 1.3.7 versions...
CVE-2026-66644 WordPress Typing Effect plugin <= 1.3.7 - Cross Site Scripting (XSS) vulnerability
Contributor Cross Site Scripting XSS in Typing Effect = 1.3.7 versions...
CVE-2026-66644
Contributor Cross Site Scripting XSS in Typing Effect = 1.3.7 versions...
CVE-2026-66644
WordPress Typing Effect plugin (versions
CVE-2026-66643
Contributor-level XSS in Wufoo Shortcode plugin (≤1.55) allows low-privileged users to inject scripts rendered in other users' browsers. CVSS 6.5 (medium) reflects network attack vector, low complexity, and required user interaction. Patchstack is the CNA; update to a fixed version beyond 1.55. N...
CVE-2026-66643 WordPress Wufoo Shortcode plugin <= 1.55 - Cross Site Scripting (XSS) vulnerability
Contributor Cross Site Scripting XSS in Wufoo Shortcode = 1.55 versions...
EUVD-2026-60927
Contributor Cross Site Scripting XSS in Wufoo Shortcode = 1.55 versions...
EUVD-2026-60926
Contributor Cross Site Scripting XSS in Video Conferencing with Zoom = 4.6.8 versions...