EUVD-2026-68790

Unauthenticated Cross Site Scripting XSS in Super Store Finder = 7.10 versions...

CVE-2026-81765 WordPress Tailored Tools plugin <= 3.0.2 - Cross Site Scripting (XSS) vulnerability

Unauthenticated Cross Site Scripting XSS in Tailored Tools = 3.0.2 versions...

CVE-2026-81764

CVE-2026-81764 is an unauthenticated Cross Site Scripting (XSS) vulnerability in the WordPress Email Essentials plugin, affecting versions 6.0.6 and earlier . Discovered by JunHee CHO , the flaw allows an attacker to inject script via the network with low complexity and no prior privileges , thou...

CVE-2026-81764 WordPress Email Essentials plugin <= 6.0.6 - Cross Site Scripting (XSS) vulnerability

Unauthenticated Cross Site Scripting XSS in Email Essentials = 6.0.6 versions...

CVE-2026-81764 WordPress Email Essentials plugin <= 6.0.6 - Cross Site Scripting (XSS) vulnerability

Unauthenticated Cross Site Scripting XSS in Email Essentials = 6.0.6 versions...

EUVD-2026-68788

Unauthenticated Cross Site Scripting XSS in Email Essentials = 6.0.6 versions...

CVE-2026-81298 WordPress LeadConnector plugin <= 4.0.5 - Cross Site Scripting (XSS) vulnerability

Unauthenticated Cross Site Scripting XSS in LeadConnector = 4.0.5 versions...

CVE-2026-81298 WordPress LeadConnector plugin <= 4.0.5 - Cross Site Scripting (XSS) vulnerability

Unauthenticated Cross Site Scripting XSS in LeadConnector = 4.0.5 versions...

EUVD-2026-68783

Unauthenticated Cross Site Scripting XSS in LeadConnector = 4.0.5 versions...

CVE-2026-81298

Unauthenticated Cross-Site Scripting (XSS) was identified in the WordPress LeadConnector plugin, affecting versions 4.0.5 and earlier . The vulnerability, discovered by daroo , allows an unauthenticated attacker to execute arbitrary scripts in a victim's browser context, with a CVSS 3.1 score of ...

EUVD-2026-68778

Unauthenticated Cross Site Scripting XSS in Email Subscribers & Newsletters = 5.9.33 versions...

CVE-2026-81291 WordPress Uncode theme <= 2.12.7 - Cross Site Scripting (XSS) vulnerability

Unauthenticated Cross Site Scripting XSS in Uncode = 2.12.7 versions...

EUVD-2026-68779

Unauthenticated Cross Site Scripting XSS in Uncode = 2.12.7 versions...

CVE-2026-81290

CVE-2026-81290 is an unauthenticated Cross Site Scripting (XSS) vulnerability in the WordPress plugin Email Subscribers & Newsletters , affecting versions ≤ 5.9.33 . The vulnerability was discovered by Jiemook and rated CVSS 7.1 (HIGH) with a vector of AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L, indicat...

CVE-2026-81291 WordPress Uncode theme <= 2.12.7 - Cross Site Scripting (XSS) vulnerability

Unauthenticated Cross Site Scripting XSS in Uncode = 2.12.7 versions...

CVE-2026-81291

CVE-2026-81291 is an unauthenticated Cross Site Scripting (XSS) vulnerability in the WordPress Uncode theme , affecting versions ≤ 2.12.7 . The vulnerability was discovered by Nguyen Ba Khanh of HPT Vietnam Corporation. With a CVSS 3.1 score of 7.1 (HIGH) , it has a network attack vector , low co...

CVE-2026-81290 WordPress Email Subscribers & Newsletters plugin <= 5.9.33 - Cross Site Scripting (XSS) vulnerability

Unauthenticated Cross Site Scripting XSS in Email Subscribers & Newsletters = 5.9.33 versions...

CVE-2026-81290 WordPress Email Subscribers & Newsletters plugin <= 5.9.33 - Cross Site Scripting (XSS) vulnerability

Unauthenticated Cross Site Scripting XSS in Email Subscribers & Newsletters = 5.9.33 versions...

CVE-2026-81890

elFinder (an open-source web file manager built on jQuery UI) prior to 2.1.70 is vulnerable to a CSRF flaw in the netmount command. The command is omitted from elFinderConnector::$csrfProtectedCmds in php/elFinderConnector.class.php, so validateCsrfToken() is never invoked for this state-changing...

CVE-2026-50199 Wallos: Cross-user Fixer/API Layer credential consumption in exchange-rate refresh

Wallos is an open-source, self-hostable personal subscription tracker. Prior to version 4.9.1, endpoints/currency/updateexchange.php loads the first Fixer/API Layer credential globally instead of loading the credential for the authenticated user. As a result, a normal authenticated user without...