21740 matches found
CVE-2026-66608
A Server-Side Request Forgery (SSRF) vulnerability was identified in the WordPress plugin Unlimited Elements For Elementor (Free Widgets, Addons, Templates) in versions
EUVD-2026-81501
Contributor SQL Injection in Product Feed Manager = 7.12.0 versions...
CVE-2026-66580 WordPress Product Feed Manager plugin <= 7.12.0 - SQL Injection vulnerability
Contributor SQL Injection in Product Feed Manager = 7.12.0 versions...
CVE-2026-66580 WordPress Product Feed Manager plugin <= 7.12.0 - SQL Injection vulnerability
Contributor SQL Injection in Product Feed Manager = 7.12.0 versions...
CVE-2026-66579
JetElements For Elementor is a WordPress plugin affected by a Contributor-level Cross Site Scripting (XSS) vulnerability in versions 2.9.2.1 and below . The flaw was discovered by nh4tvd and is rated CVSS 6.5 (MEDIUM) , with a changed scope and low impact on confidentiality, integrity, and availa...
CVE-2026-66578
A Contributor-level Cross Site Scripting (XSS) vulnerability affects the PropertyHive WordPress plugin in versions 2.2.6 and earlier . A user with the Contributor role can inject arbitrary script that executes in another user's browser, with changed scope and low impact on confidentiality, integr...
EUVD-2026-81499
Contributor Cross Site Scripting XSS in PropertyHive = 2.2.6 versions...
CVE-2026-66578 WordPress PropertyHive plugin <= 2.2.6 - Cross Site Scripting (XSS) vulnerability
Contributor Cross Site Scripting XSS in PropertyHive = 2.2.6 versions...
CVE-2026-66579 WordPress JetElements For Elementor plugin <= 2.9.2.1 - Cross Site Scripting (XSS) vulnerability
Contributor Cross Site Scripting XSS in JetElements For Elementor = 2.9.2.1 versions...
CVE-2026-66579 WordPress JetElements For Elementor plugin <= 2.9.2.1 - Cross Site Scripting (XSS) vulnerability
Contributor Cross Site Scripting XSS in JetElements For Elementor = 2.9.2.1 versions...
CVE-2026-66578 WordPress PropertyHive plugin <= 2.2.6 - Cross Site Scripting (XSS) vulnerability
Contributor Cross Site Scripting XSS in PropertyHive = 2.2.6 versions...
CVE-2026-66577
CVE-2026-66577 is a Contributor Cross Site Scripting (XSS) vulnerability in the JetSearch WordPress plugin, affecting versions ≤ 3.6.3 . The vulnerability was discovered by nh4tvd and reported via Patchstack , which serves as the CNA. The CVSS 3.1 score is 6.5 (MEDIUM) , with a vector of AV:N/AC:...
EUVD-2026-81498
Contributor Cross Site Scripting XSS in JetSearch = 3.6.3 versions...
CVE-2026-66577 WordPress JetSearch plugin <= 3.6.3 - Cross Site Scripting (XSS) vulnerability
Contributor Cross Site Scripting XSS in JetSearch = 3.6.3 versions...
CVE-2026-66577 WordPress JetSearch plugin <= 3.6.3 - Cross Site Scripting (XSS) vulnerability
Contributor Cross Site Scripting XSS in JetSearch = 3.6.3 versions...
CVE-2026-66576
CVE-2026-66576 is a Contributor-level Cross Site Scripting (XSS) vulnerability in the JetBlocks For Elementor WordPress plugin, affecting versions 1.5.2 and earlier . The flaw was discovered by nh4tvd (reported via Patchstack). The vulnerability carries a CVSS 3.1 base score of 6.5 (MEDIUM) with ...
CVE-2026-66576 WordPress JetBlocks For Elementor plugin <= 1.5.2 - Cross Site Scripting (XSS) vulnerability
Contributor Cross Site Scripting XSS in JetBlocks For Elementor = 1.5.2 versions...
EUVD-2026-81497
Contributor Cross Site Scripting XSS in JetBlocks For Elementor = 1.5.2 versions...