CVE-2026-97279 WordPress Polylang plugin <= 3.8.9 - Cross Site Scripting (XSS) vulnerability

Contributor Cross Site Scripting XSS in Polylang = 3.8.9 versions...

CVE-2026-97271

The WPFunnels WordPress plugin, version 3.13.1 and below , is vulnerable to an unauthenticated Cross Site Scripting (XSS) vulnerability. Technical details regarding the specific component or root cause are not provided in the documents. The CVSS 3.1 score is 7.1 (High) , with a vector of CVSS:3.1...

CVE-2026-97270 WordPress CMB2 plugin <= 2.13.0 - Cross Site Scripting (XSS) vulnerability

Subscriber Cross Site Scripting XSS in CMB2 = 2.13.0 versions...

CVE-2026-97270 WordPress CMB2 plugin <= 2.13.0 - Cross Site Scripting (XSS) vulnerability

Subscriber Cross Site Scripting XSS in CMB2 = 2.13.0 versions...

EUVD-2026-89918

Contributor Cross Site Scripting XSS in Virtue/Ascend/Pinnacle Toolkit = 4.9.12.1 versions...

CVE-2026-97266 WordPress Virtue/Ascend/Pinnacle Toolkit plugin <= 4.9.12.1 - Cross Site Scripting (XSS) vulnerability

Contributor Cross Site Scripting XSS in Virtue/Ascend/Pinnacle Toolkit = 4.9.12.1 versions...

CVE-2026-97266

The Virtue/Ascend/Pinnacle Toolkit plugin for WordPress is vulnerable to a Cross Site Scripting (XSS) vulnerability in versions

CVE-2026-97266 WordPress Virtue/Ascend/Pinnacle Toolkit plugin <= 4.9.12.1 - Cross Site Scripting (XSS) vulnerability

Contributor Cross Site Scripting XSS in Virtue/Ascend/Pinnacle Toolkit = 4.9.12.1 versions...

CVE-2026-97262 WordPress Visual Composer Website Builder plugin <= 45.16.2 - Cross Site Scripting (XSS) vulnerability

Contributor Cross Site Scripting XSS in Visual Composer Website Builder = 45.16.2 versions...

CVE-2026-97262 WordPress Visual Composer Website Builder plugin <= 45.16.2 - Cross Site Scripting (XSS) vulnerability

Contributor Cross Site Scripting XSS in Visual Composer Website Builder = 45.16.2 versions...

CVE-2026-97238 WordPress JetEngine plugin <= 3.8.14.3 - Cross Site Scripting (XSS) vulnerability

Subscriber Cross Site Scripting XSS in JetEngine = 3.8.14.3 versions...

CVE-2026-97237 WordPress JetEngine plugin <= 3.8.14.3 - Cross Site Scripting (XSS) vulnerability

Unauthenticated Cross Site Scripting XSS in JetEngine = 3.8.14.3 versions...

CVE-2026-97237

The WordPress JetEngine plugin (versions

CVE-2026-97236

The WordPress ThemeREX Addons plugin, in versions

CVE-2026-97077 WordPress Ad Inserter plugin <= 2.8.18 - Cross Site Scripting (XSS) vulnerability

Unauthenticated Cross Site Scripting XSS in Ad Inserter = 2.8.18 versions...

CVE-2026-97067 WordPress EWWW Image Optimizer plugin <= 8.7.7 - Cross Site Scripting (XSS) vulnerability

Contributor Cross Site Scripting XSS in EWWW Image Optimizer = 8.7.7 versions...

CVE-2026-97067 WordPress EWWW Image Optimizer plugin <= 8.7.7 - Cross Site Scripting (XSS) vulnerability

Contributor Cross Site Scripting XSS in EWWW Image Optimizer = 8.7.7 versions...

CVE-2026-97067

The EWWW Image Optimizer WordPress plugin (versions

EUVD-2026-89887

Contributor Cross Site Scripting XSS in King Addons for Elementor = 51.1.85 versions...

CVE-2026-96835 WordPress King Addons for Elementor plugin <= 51.1.85 - Cross Site Scripting (XSS) vulnerability

Contributor Cross Site Scripting XSS in King Addons for Elementor = 51.1.85 versions...