CVE-2026-112838 WordPress VikRentCar plugin <= 1.4.8 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in e4jvikwp VikRentCar vikrentcar allows Stored XSS.This issue affects VikRentCar: from n/a through 1.4.8...

CVE-2026-112838

The WordPress VikRentCar plugin (versions

EUVD-2026-108111

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in ACF Extended ACF Extended acf-extended allows Stored XSS.This issue affects ACF Extended: from n/a through 0.9.2.7...

CVE-2026-112313 WordPress ACF Extended plugin <= 0.9.2.7 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in ACF Extended ACF Extended acf-extended allows Stored XSS.This issue affects ACF Extended: from n/a through 0.9.2.7...

CVE-2026-112313

The ACF Extended WordPress plugin (versions up to and including 0.9.2.7 ) is vulnerable to a Stored Cross-Site Scripting (XSS) flaw. The root cause is the improper neutralization of input during web page generation , which allows an attacker to inject malicious scripts that are stored on the serv...

CVE-2026-111830 WordPress WP Mailster plugin <= 1.9.1.0 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in WP Mailster WP Mailster wp-mailster allows Stored XSS.This issue affects WP Mailster: from n/a through 1.9.1.0...

CVE-2026-111830

The WP Mailster WordPress plugin (versions

CVE-2026-112867

The WordPress H5P plugin (versions up to and including 1.17.9 ) is vulnerable to a Stored Cross-Site Scripting (XSS) issue due to the Improper Neutralization of Input During Web Page Generation . An attacker can exploit this flaw to execute malicious scripts in the context of the victim's browser...

CVE-2026-112867 WordPress H5P plugin <= 1.17.9 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in H5P H5P h5p allows Stored XSS.This issue affects H5P: from n/a through 1.17.9...

CVE-2026-84915

Improper Neutralization of Input During Web Page Generation "Cross-site Scripting" vulnerability in Drupal Component blocks allows Stored XSS. This issue affects Component blocks versions: from 0.0.0 to 1.2.7...

EUVD-2026-107876

Improper Neutralization of Input During Web Page Generation "Cross-site Scripting" vulnerability in Drupal Component blocks allows Stored XSS. This issue affects Component blocks versions: from 0.0.0 to 1.2.7...

CVE-2026-84915 Component blocks - Moderately critical - Cross site scripting - SA-CONTRIB-2026-123

Improper Neutralization of Input During Web Page Generation "Cross-site Scripting" vulnerability in Drupal Component blocks allows Stored XSS. This issue affects Component blocks versions: from 0.0.0 to 1.2.7...

CVE-2026-84915

The Component blocks module for Drupal (versions 0.0.0 through 1.2.7 ) is vulnerable to Stored Cross-site Scripting (XSS) . The root cause is the insufficient validation of user input before it is processed during token replacement . Practical exploitation requires the attacker to possess a role ...

CVE-2026-84915 Component blocks - Moderately critical - Cross site scripting - SA-CONTRIB-2026-123

Improper Neutralization of Input During Web Page Generation "Cross-site Scripting" vulnerability in Drupal Component blocks allows Stored XSS. This issue affects Component blocks versions: from 0.0.0 to 1.2.7...

CVE-2026-87939

The Drupal Feed Block module is vulnerable to Stored Cross-Site Scripting (XSS) because it fails to sufficiently validate or sanitize the RSS feeds it generates from remote sources. This allows an attacker to inject malicious scripts into web pages viewed by other users. The issue affects version...

CVE-2026-110899 WordPress Ninja Forms plugin <= 3.15.5 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Kevin Stover Ninja Forms ninja-forms allows Stored XSS.This issue affects Ninja Forms: from n/a through 3.15.5...

CVE-2026-110899 WordPress Ninja Forms plugin <= 3.15.5 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Kevin Stover Ninja Forms ninja-forms allows Stored XSS.This issue affects Ninja Forms: from n/a through 3.15.5...

CVE-2026-110899

The Ninja Forms WordPress plugin (versions

CVE-2026-110375 WordPress Download Monitor plugin <= 5.3.3 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in WP Chill Download Monitor download-monitor allows Stored XSS.This issue affects Download Monitor: from n/a through 5.3.3...

CVE-2026-106604 WordPress YITH WooCommerce Compare plugin <= 3.15.0 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in YITH YITH WooCommerce Compare yith-woocommerce-compare allows Stored XSS.This issue affects YITH WooCommerce Compare: from n/a through 3.15.0...