1149142 matches found
WordPress Do Lasso plugin <= 358 - Cross Site Scripting (XSS) vulnerability
Cross Site Scripting XSS vulnerability discovered by luc in WordPress Plugin Do Lasso versions = 358...
WordPress Samex - Clean, Minimal Shop WooCommerce WordPress Theme theme <= 2.5 - Cross Site Scripting (XSS) vulnerability
WordPress Samex - Clean, Minimal Shop WooCommerce WordPress Theme theme = 2.5 - Cross Site Scripting XSS vulnerability discovered by Tran Nguyen Bao Khanh VCI - VNPT Cyber Immunity in WordPress Theme Samex - Clean, Minimal Shop WooCommerce WordPress Theme versions = 2.5...
PT-2026-71684
Cross-site Scripting in the Markdown renderer in maalfer Pentestify before 2.3.2 allows authenticated users to execute arbitrary JavaScript in the application origin via a Markdown link whose URL contains a double quote, which closes the anchor's href attribute because the renderer's sanitization...
PT-2026-71600
Author Cross Site Scripting XSS in WP Data Access = 5.5.79 versions...
PT-2026-71549
Unauthenticated Cross Site Scripting XSS in Visitor Traffic Real Time Statistics Pro = 11.10 versions...
PT-2026-71558
Unauthenticated Cross Site Scripting XSS in Geo Mashup = 1.13.18 versions...
PT-2026-71591
Unauthenticated Cross Site Scripting XSS in Colissimo Officiel : Méthodes de livraison pour WooCommerce = 2.10.0 versions...
PT-2026-71508
Unauthenticated Cross Site Scripting XSS in Maspik – Spam blacklist = 2.9.1 versions...
PT-2026-71545
Unauthenticated Cross Site Scripting XSS in Agrion = 1.0.0 versions...
PT-2026-71521
Unauthenticated Cross Site Scripting XSS in Blog Floating Button = 1.4.20 versions...
CVE-2026-66426: Improper Neutralization of Input During Web Page Generation
Unauthenticated Cross Site Scripting XSS in WP-Stats = 2.56 versions...
PT-2026-76573
Name of the Vulnerable Software and Affected Versions Etherpad versions 2.1.0 through 3.0.0 Description Etherpad fails to properly sanitize the x-proxy-path request header, leading to two distinct issues when client-supplied headers reach the server. First, in src/node/hooks/express/admin.ts, the...
PT-2026-71502
Unauthenticated Cross Site Scripting XSS in Welcart e-Commerce = 2.11.31 versions...
PT-2026-71517
Unauthenticated Cross Site Scripting XSS in Do Lasso = 358 versions...
PT-2026-71604
Donor Cross Site Scripting XSS in GiveWP 4.16.6 versions...
CVE-2026-19744: Improper Neutralization of Input During Web Page Generation
Cross-site Scripting in the Markdown renderer in maalfer Pentestify before 2.3.2 allows authenticated users to execute arbitrary JavaScript in the application origin via a Markdown link whose URL contains a double quote, which closes the anchor's href attribute because the renderer's sanitization...
CVE-2026-66468: Improper Neutralization of Input During Web Page Generation
Unauthenticated Cross Site Scripting XSS in Local Delivery Drivers for WooCommerce = 3.0.0 versions...
PT-2026-71536
Unauthenticated Cross Site Scripting XSS in GeekyBot = 1.2.6 versions...