CVE-2026-82221 WordPress RegistrationMagic plugin <= 6.0.9.8 - Cross Site Scripting (XSS) vulnerability

Unauthenticated Cross Site Scripting XSS in RegistrationMagic = 6.0.9.8 versions...

CVE-2026-82221

CVE-2026-82221 affects the RegistrationMagic WordPress plugin (a custom registration form builder with submission manager) in versions ≤ 6.0.9.8 . The vulnerability is an unauthenticated Cross Site Scripting (XSS) , rated CVSS 3.1: 7.1 (HIGH) with a vector of AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L, ...

EUVD-2026-68793

Unauthenticated Cross Site Scripting XSS in RegistrationMagic = 6.0.9.8 versions...

EUVD-2026-68791

Subscriber Cross Site Scripting XSS in Kalles Addons = 1.0.6 versions...

CVE-2026-81778

CVE-2026-81778 affects the Kalles Addons WordPress plugin in versions 1.0.6 and earlier . The vulnerability is a Cross Site Scripting (XSS) flaw in the plugin's Subscriber functionality. The CVSS v3.1 score is 6.5 (MEDIUM) with a Changed Scope vector (CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L)...

CVE-2026-81778 WordPress Kalles Addons plugin <= 1.0.6 - Cross Site Scripting (XSS) vulnerability

Subscriber Cross Site Scripting XSS in Kalles Addons = 1.0.6 versions...

CVE-2026-81768

CVE-2026-81768 is an unauthenticated Cross Site Scripting (XSS) vulnerability in the WordPress plugin Super Store Finder , affecting versions

CVE-2026-81765 WordPress Tailored Tools plugin <= 3.0.2 - Cross Site Scripting (XSS) vulnerability

Unauthenticated Cross Site Scripting XSS in Tailored Tools = 3.0.2 versions...

CVE-2026-81768 WordPress Super Store Finder plugin <= 7.10 - Cross Site Scripting (XSS) vulnerability

Unauthenticated Cross Site Scripting XSS in Super Store Finder = 7.10 versions...

EUVD-2026-68789

Unauthenticated Cross Site Scripting XSS in Tailored Tools = 3.0.2 versions...

CVE-2026-81765

CVE-2026-81765 is an unauthenticated Cross-Site Scripting (XSS) vulnerability in the WordPress plugin Tailored Tools , affecting versions 3.0.2 and earlier . The vulnerability was discovered by V1T and is rated HIGH (CVSS 3.1: 7.1) , with a network attack vector, low complexity, no privileges req...

EUVD-2026-68790

Unauthenticated Cross Site Scripting XSS in Super Store Finder = 7.10 versions...

CVE-2026-81764 WordPress Email Essentials plugin <= 6.0.6 - Cross Site Scripting (XSS) vulnerability

Unauthenticated Cross Site Scripting XSS in Email Essentials = 6.0.6 versions...

CVE-2026-81764

CVE-2026-81764 is an unauthenticated Cross Site Scripting (XSS) vulnerability in the WordPress Email Essentials plugin, affecting versions 6.0.6 and earlier . Discovered by JunHee CHO , the flaw allows an attacker to inject script via the network with low complexity and no prior privileges , thou...

EUVD-2026-68788

Unauthenticated Cross Site Scripting XSS in Email Essentials = 6.0.6 versions...

EUVD-2026-68783

Unauthenticated Cross Site Scripting XSS in LeadConnector = 4.0.5 versions...

CVE-2026-81298

Unauthenticated Cross-Site Scripting (XSS) was identified in the WordPress LeadConnector plugin, affecting versions 4.0.5 and earlier . The vulnerability, discovered by daroo , allows an unauthenticated attacker to execute arbitrary scripts in a victim's browser context, with a CVSS 3.1 score of ...

CVE-2026-81298 WordPress LeadConnector plugin <= 4.0.5 - Cross Site Scripting (XSS) vulnerability

Unauthenticated Cross Site Scripting XSS in LeadConnector = 4.0.5 versions...

EUVD-2026-68778

Unauthenticated Cross Site Scripting XSS in Email Subscribers & Newsletters = 5.9.33 versions...

CVE-2026-81290

CVE-2026-81290 is an unauthenticated Cross Site Scripting (XSS) vulnerability in the WordPress plugin Email Subscribers & Newsletters , affecting versions ≤ 5.9.33 . The vulnerability was discovered by Jiemook and rated CVSS 7.1 (HIGH) with a vector of AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L, indicat...