CVE-2026-66707 WordPress Facebook for WooCommerce plugin <= 3.7.5 - Cross Site Scripting (XSS) vulnerability

Unauthenticated Cross Site Scripting XSS in Facebook for WooCommerce = 3.7.5 versions...

CVE-2026-66706

CVE-2026-66706 affects the WordPress plugin “Subscribe to Comments” (versions

CVE-2026-66706

Author Cross Site Scripting XSS in Subscribe to Comments = 2.3.1 versions...

EUVD-2026-53910

Unauthenticated Cross Site Scripting XSS in Facebook for WooCommerce = 3.7.5 versions...

CVE-2026-66706 WordPress Subscribe to Comments plugin <= 2.3.1 - Cross Site Scripting (XSS) vulnerability

Author Cross Site Scripting XSS in Subscribe to Comments = 2.3.1 versions...

EUVD-2026-53909

Author Cross Site Scripting XSS in Subscribe to Comments = 2.3.1 versions...

CVE-2026-66707

Unauthenticated Cross Site Scripting XSS in Facebook for WooCommerce = 3.7.5 versions...

CVE-2026-66705 WordPress Facebook for WordPress plugin <= 5.2.1 - Cross Site Scripting (XSS) vulnerability

Unauthenticated Cross Site Scripting XSS in Facebook for WordPress = 5.2.1 versions...

EUVD-2026-53908

Unauthenticated Cross Site Scripting XSS in Facebook for WordPress = 5.2.1 versions...

CVE-2026-66705

CVE-2026-66705: Unauthenticated Cross Site Scripting (XSS) in the WordPress plugin Facebook for WordPress, affecting version

CVE-2026-66702 WordPress Rank Math SEO plugin <= 1.0.274.1 - Cross Site Scripting (XSS) vulnerability

Unauthenticated Cross Site Scripting XSS in Rank Math SEO = 1.0.274.1 versions...

EUVD-2026-53906

Unauthenticated Cross Site Scripting XSS in Rank Math SEO = 1.0.274.1 versions...

CVE-2026-66703

CVE-2026-66703 describes a Contributor Cross Site Scripting (XSS) vulnerability in the WordPress MailOptin plugin versions

EUVD-2026-53907

Contributor Cross Site Scripting XSS in MailOptin = 1.2.78.0 versions...

CVE-2026-66703 WordPress MailOptin plugin <= 1.2.78.0 - Cross Site Scripting (XSS) vulnerability

Contributor Cross Site Scripting XSS in MailOptin = 1.2.78.0 versions...

CVE-2026-66702

CVE-2026-66702 affects the WordPress Rank Math SEO plugin up to version 1.0.274.1 and is described as an unauthenticated Cross Site Scripting (XSS) vulnerability. The connected documents confirm the vulnerability exists in Rank Math SEO

CVE-2026-66694 WordPress Thrive Architect plugin <= 10.9.3.1 - Cross Site Scripting (XSS) vulnerability

Unauthenticated Cross Site Scripting XSS in Thrive Architect = 10.9.3.1 versions...

CVE-2026-66694

The CVE-2026-66694 entry concerns an Unauthenticated Cross Site Scripting (XSS) vulnerability affecting the WordPress Thrive Architect plugin (versions up to and including 10.9.3.1). The connected documents consistently describe a client-side/server-side XSS condition in Thrive Architect, without...

EUVD-2026-53901

Unauthenticated Cross Site Scripting XSS in Thrive Architect = 10.9.3.1 versions...

CVE-2026-66690

Unauthenticated Cross Site Scripting XSS in GiveWP = 4.16.5 versions...