CVE-2026-95530

The PixelYourSite – Your smart PIXEL (TAG) Manager WordPress plugin is vulnerable to a Subscriber Cross Site Scripting (XSS) flaw in versions

EUVD-2026-85498

Subscriber Cross Site Scripting XSS in PixelYourSite – Your smart PIXEL TAG Manager = 11.4.1 versions...

CVE-2026-95529 WordPress Calculated Fields Form plugin <= 5.5.1.1 - Cross Site Scripting (XSS) vulnerability

Unauthenticated Cross Site Scripting XSS in Calculated Fields Form = 5.5.1.1 versions...

CVE-2026-95529 WordPress Calculated Fields Form plugin <= 5.5.1.1 - Cross Site Scripting (XSS) vulnerability

Unauthenticated Cross Site Scripting XSS in Calculated Fields Form = 5.5.1.1 versions...

CVE-2026-95530 WordPress PixelYourSite – Your smart PIXEL (TAG) Manager plugin <= 11.4.1 - Cross Site Scripting (XSS) vulnerability

Subscriber Cross Site Scripting XSS in PixelYourSite – Your smart PIXEL TAG Manager = 11.4.1 versions...

CVE-2026-95530 WordPress PixelYourSite – Your smart PIXEL (TAG) Manager plugin <= 11.4.1 - Cross Site Scripting (XSS) vulnerability

Subscriber Cross Site Scripting XSS in PixelYourSite – Your smart PIXEL TAG Manager = 11.4.1 versions...

CVE-2026-95528

The Core Web Vitals & PageSpeed Booster WordPress plugin, in versions

CVE-2026-95528 WordPress Core Web Vitals & PageSpeed Booster plugin <= 1.0.31 - Cross Site Scripting (XSS) vulnerability

Unauthenticated Cross Site Scripting XSS in Core Web Vitals & PageSpeed Booster = 1.0.31 versions...

CVE-2026-95515

The Ninja Forms WordPress plugin, version 3.15.3 and below , is vulnerable to an unauthenticated Cross Site Scripting (XSS) . This vulnerability allows an attacker to execute malicious scripts in the context of the user's browser. No specific root cause, exploit links, or remediation steps are pr...

CVE-2026-95515 WordPress Ninja Forms plugin <= 3.15.3 - Cross Site Scripting (XSS) vulnerability

Unauthenticated Cross Site Scripting XSS in Ninja Forms = 3.15.3 versions...

CVE-2026-94684

This CVE ID is rejected and does not represent an active vulnerability entry.

EUVD-2026-85487

Contributor Cross Site Scripting XSS in Ocean Extra = 2.6.1 versions...

CVE-2026-94684

...

CVE-2026-94684

...

EUVD-2026-85485

Contributor Cross Site Scripting XSS in The Post Grid = 7.9.5 versions...

CVE-2026-94680 WordPress The Post Grid plugin <= 7.9.5 - Cross Site Scripting (XSS) vulnerability

Contributor Cross Site Scripting XSS in The Post Grid = 7.9.5 versions...

CVE-2026-94682

The Podcast Importer SecondLine plugin for WordPress, in versions

EUVD-2026-85486

Contributor Cross Site Scripting XSS in Podcast Importer SecondLine = 1.5.6 versions...

CVE-2026-94682 WordPress Podcast Importer SecondLine plugin <= 1.5.6 - Cross Site Scripting (XSS) vulnerability

Contributor Cross Site Scripting XSS in Podcast Importer SecondLine = 1.5.6 versions...

CVE-2026-94682 WordPress Podcast Importer SecondLine plugin <= 1.5.6 - Cross Site Scripting (XSS) vulnerability

Contributor Cross Site Scripting XSS in Podcast Importer SecondLine = 1.5.6 versions...