1252904 matches found
CVE-2026-84765
Breadcrumb NavXT , a popular WordPress plugin, is affected by an unauthenticated Cross-Site Scripting (XSS) vulnerability in versions 7.5.1 and earlier . The flaw is classified with a CVSS 3.1 score of 7.1 (HIGH) , reflecting a network attack vector, low complexity, no privileges required, but re...
CVE-2026-84765 WordPress Breadcrumb NavXT plugin <= 7.5.1 - Cross Site Scripting (XSS) vulnerability
Unauthenticated Cross Site Scripting XSS in Breadcrumb NavXT = 7.5.1 versions...
CVE-2026-84763 WordPress RTMKit plugin <= 2.1.5 - Cross Site Scripting (XSS) vulnerability
Unauthenticated Cross Site Scripting XSS in RTMKit = 2.1.5 versions...
EUVD-2026-70581
Unauthenticated Cross Site Scripting XSS in RTMKit = 2.1.5 versions...
CVE-2026-84763 WordPress RTMKit plugin <= 2.1.5 - Cross Site Scripting (XSS) vulnerability
Unauthenticated Cross Site Scripting XSS in RTMKit = 2.1.5 versions...
CVE-2026-81773 WordPress Ninja Forms File Uploads Extension plugin <= 3.3.26 - Cross Site Scripting (XSS) vulnerability
Unauthenticated Cross Site Scripting XSS in Ninja Forms File Uploads Extension = 3.3.26 versions...
CVE-2026-81773
CVE-2026-81773 affects the WordPress Ninja Forms File Uploads Extension plugin in versions 3.3.26 and below . The vulnerability is an unauthenticated Cross-Site Scripting (XSS) flaw, meaning no prior authentication is required to exploit it. The CVSS 3.1 base score is 7.1 (HIGH) with a vector of ...
EUVD-2026-70592
Unauthenticated Cross Site Scripting XSS in WP QuickLaTeX = 3.8.8 versions...
CVE-2026-81776
CVE-2026-81776 affects the WordPress WP QuickLaTeX plugin in versions
CVE-2026-81776 WordPress WP QuickLaTeX plugin <= 3.8.8 - Cross Site Scripting (XSS) vulnerability
Unauthenticated Cross Site Scripting XSS in WP QuickLaTeX = 3.8.8 versions...
EUVD-2026-70564
Unauthenticated Cross Site Scripting XSS in Ninja Forms File Uploads Extension = 3.3.26 versions...
CVE-2026-81776 WordPress WP QuickLaTeX plugin <= 3.8.8 - Cross Site Scripting (XSS) vulnerability
Unauthenticated Cross Site Scripting XSS in WP QuickLaTeX = 3.8.8 versions...
CVE-2026-81300 WordPress Calculation For Contact Form 7 plugin <= 1.0 - Cross Site Scripting (XSS) vulnerability
Unauthenticated Cross Site Scripting XSS in Calculation For Contact Form 7 = 1.0 versions...
EUVD-2026-70593
Unauthenticated Cross Site Scripting XSS in Calculation For Contact Form 7 = 1.0 versions...
CVE-2026-81300
CVE-2026-81300 is an unauthenticated Cross Site Scripting (XSS) vulnerability affecting the Calculation For Contact Form 7 WordPress plugin in versions ≤ 1.0 . The CVSS v3.1 score is 7.1 (HIGH) with a vector of AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L, indicating a network-based attack with low comple...
CVE-2026-81295
CVE-2026-81295 affects the WordPress Under Construction plugin (versions ≤ 5.82 ) with an unauthenticated Cross-Site Scripting (XSS) flaw, as identified by Patchstack. The CVSS 3.1 score is 7.1 (HIGH) with the vector AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L, indicating a network-based attack with low ...
CVE-2026-81295 WordPress Under Construction plugin <= 5.82 - Cross Site Scripting (XSS) vulnerability
Unauthenticated Cross Site Scripting XSS in Under Construction = 5.82 versions...
EUVD-2026-70562
Unauthenticated Cross Site Scripting XSS in Under Construction = 5.82 versions...