3189718 matches found
CVE-2026-97019 AMP for WP <= 1.1.17 - Unauthenticated Stored Cross-Site Scripting via 'headline-*' Shortcode Attribute
The AMP for WP – Accelerated Mobile Pages plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'headline-' Shortcode Attribute in all versions up to, and including, 1.1.17 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated...
CVE-2026-107625 Ultimate Member <= 2.14.0 - Authenticated (Subscriber+) Stored Cross-Site Scripting via 'user_url' Profile Field
The Ultimate Member – User Profile, Registration, Login, Member Directory, Content Restriction & Membership Plugin plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'userurl' parameter in all versions up to, and including, 2.14.0 due to insufficient input sanitization and...
CVE-2026-118178
A remote RSS feed could use the itunes:new-feed-url or newLocation ele...
CVE-2026-118013
Use-after-free in the Layout: Images, Video, and HTML Frames component...
CVE-2026-118015
Use-after-free in the DOM: Core & HTML component. This vulnerability w...
CVE-2026-118016
Use-after-free in the DOM: Core & HTML component. This vulnerability w...
CVE-2026-117953
Use-after-free in the DOM: Core & HTML component. This vulnerability w...
CVE-2026-117951
Use-after-free in the DOM: Core & HTML component. This vulnerability w...
CVE-2026-117968
Use-after-free in the DOM: Core & HTML component. This vulnerability w...
CVE-2026-117943
Use-after-free in the DOM: Core & HTML component. This vulnerability w...
CVE-2026-117949
Use-after-free in the DOM: Core & HTML component. This vulnerability w...
CVE-2026-117950
Incorrect boundary conditions in the DOM: Core & HTML component. This...
CVE-2026-117960
Spoofing issue in the DOM: Core & HTML component. This vulnerability w...
CVE-2026-117920
Use-after-free in the DOM: HTML Parser component. This vulnerability w...
CVE-2026-117932
Use-after-free in the DOM: Core & HTML component. This vulnerability w...
CVE-2026-117919
Use-after-free in the DOM: Core & HTML component. This vulnerability w...
CVE-2026-117925
Use-after-free in the DOM: Core & HTML component. This vulnerability w...
CVE-2026-117936
Use-after-free in the DOM: Core & HTML component. This vulnerability w...