PT-2026-78967

Name of the Vulnerable Software and Affected Versions Advance Product Search versions prior to 1.4.9 Description An unauthenticated Cross Site Scripting XSS issue exists, which allows an attacker to execute malicious scripts in the browser of a user by injecting code into a web page...

PT-2026-78966

Unauthenticated Cross Site Scripting XSS in SmartSMTP = 1.2.0 versions...

CVE-2026-71368: Improper Neutralization of Input During Web Page Generation

F-RevoCRM contains a cross-site scripting vulnerability. If a user views a crafted page while logged in to the affected product, unintended operations may be performed...

CVE-2026-66606: Improper Neutralization of Input During Web Page Generation

Unauthenticated Cross Site Scripting XSS in SmartSMTP = 1.2.0 versions...

PT-2026-78964

Unauthenticated Cross Site Scripting XSS in GeoDirectory = 2.8.173 versions...

CVE-2026-66598: Improper Neutralization of Input During Web Page Generation

Unauthenticated Cross Site Scripting XSS in B2BKing Premium = 5.6.07 versions...

PT-2026-78898

F-RevoCRM contains a cross-site scripting vulnerability. If a user views a crafted page while logged in to the affected product, unintended operations may be performed...

PT-2026-78970

Unauthenticated Cross Site Scripting XSS in Aora = 1.3.19 versions...

PT-2026-78972

Unauthenticated Cross Site Scripting XSS in Podlove Podcast Publisher = 4.5.4 versions...

PT-2026-78961

Unauthenticated Cross Site Scripting XSS in B2BKing Premium = 5.6.07 versions...

PT-2026-78963

Subscriber Cross Site Scripting XSS in Media LIbrary Assistant = 3.39 versions...

PT-2026-78951

Unauthenticated Cross Site Scripting XSS in JetEngine = 3.8.14.1 versions...

PT-2026-78971

Unauthenticated Cross Site Scripting XSS in SEO Plugin by Squirrly SEO = 14.2.2 versions...

CVE-2026-66597: Improper Neutralization of Input During Web Page Generation

Unauthenticated Cross Site Scripting XSS in wpDataTables = 6.5.1.4 versions...

CVE-2026-66612: Improper Neutralization of Input During Web Page Generation

Unauthenticated Cross Site Scripting XSS in Aora = 1.3.19 versions...

CVE-2026-66673: Improper Neutralization of Input During Web Page Generation

Unauthenticated Cross Site Scripting XSS in Flatastic = 2.0 versions...

PT-2026-78952

Unauthenticated Cross Site Scripting XSS in TranslatePress = 3.3.2 versions...

CVE-2026-66582: Improper Neutralization of Input During Web Page Generation

Unauthenticated Cross Site Scripting XSS in TranslatePress = 3.3.2 versions...

PT-2026-78983

Subscriber Cross Site Scripting XSS in WP BASE Booking = 6.3.2 versions...

CVE-2026-66581: Improper Neutralization of Input During Web Page Generation

Unauthenticated Cross Site Scripting XSS in JetEngine = 3.8.14.1 versions...