CVE-2026-115610 WordPress PublishPress Authors plugin <= 4.17.0 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in PublishPress PublishPress Authors publishpress-authors allows Stored XSS.This issue affects PublishPress Authors: from n/a through 4.17.0...

CVE-2026-116857

The Crocoblock JetSmartFilters plugin (versions

CVE-2026-116857 WordPress JetSmartFilters plugin <= 3.8.6.2 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Crocoblock JetSmartFilters jet-smart-filters allows Stored XSS.This issue affects JetSmartFilters: from n/a through 3.8.6.2...

CVE-2026-48195 WordPress PDF Poster plugin <= 2.6.1 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in bPlugins PDF Poster pdf-poster allows Stored XSS.This issue affects PDF Poster: from n/a through 2.6.1...

EUVD-2026-112812

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in bPlugins PDF Poster pdf-poster allows Stored XSS.This issue affects PDF Poster: from n/a through 2.6.1...

CVE-2026-24533 WordPress Cozy Blocks plugin <= 2.2.27 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in CozyThemes Cozy Blocks cozy-addons allows Stored XSS.This issue affects Cozy Blocks: from n/a through 2.2.27...

CVE-2026-24533

A Stored Cross-Site Scripting (XSS) vulnerability exists in the CozyThemes Cozy Blocks (cozy-addons) WordPress plugin, affecting versions up to and including 2.2.27 . The flaw stems from the Improper Neutralization of Input During Web Page Generation , which allows an attacker to inject and store...

CVE-2026-118087

The Gemini Labs Site Reviews WordPress plugin is vulnerable to a Stored Cross-Site Scripting (XSS) vulnerability in versions up to and including 8.3.5 . The root cause is the improper neutralization of input during web page generation , which allows an attacker to inject malicious scripts into th...

CVE-2026-118087 WordPress Site Reviews plugin <= 8.3.5 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Gemini Labs Site Reviews site-reviews allows Stored XSS.This issue affects Site Reviews: from n/a through 8.3.5...

CVE-2026-118094 WordPress Ad Inserter plugin <= 2.8.18 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Igor Funa Ad Inserter ad-inserter allows Stored XSS.This issue affects Ad Inserter: from n/a through 2.8.18...

CVE-2026-56056

The The Post Grid WordPress plugin (versions n/a through 7.9.7 ) is vulnerable to a Stored Cross-site Scripting (XSS) flaw due to improper neutralization of input during web page generation. This vulnerability allows an attacker to inject and execute malicious scripts in the context of the victim...

CVE-2026-115611

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in PluginUs.Net TableOn posts-table-filterable allows Reflected XSS.This issue affects TableOn: from n/a through 1.0.7...

CVE-2026-115611

The PluginUs.Net TableOn plugin for WordPress is vulnerable to a Reflected Cross-site Scripting (XSS) flaw in the posts-table-filterable component. This vulnerability is caused by improper neutralization of input during web page generation and affects versions from n/a through 1.0.7 . Exploitatio...

CVE-2026-115611 WordPress TableOn plugin <= 1.0.7 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in PluginUs.Net TableOn posts-table-filterable allows Reflected XSS.This issue affects TableOn: from n/a through 1.0.7...

chromium-browser: angle: ANGLE in Google Chrome: Arbitrary code execution via improper input validation

A flaw was found in ANGLE, a component of Google Chrome. Improper input validation could allow a remote attacker to execute arbitrary code outside of the browser's security sandbox by enticing a user to visit a specially crafted HTML page. This could lead to a complete compromise of the affected...

chromium-browser: angle: ANGLE in Google Chrome: Arbitrary code execution via improper input validation

A flaw was found in ANGLE, a component of Google Chrome. Improper input validation could allow a remote attacker to execute arbitrary code outside of the browser's security sandbox by enticing a user to visit a specially crafted HTML page. This could lead to a complete compromise of the affected...

CVE-2026-0848

CVE-2026-0848 — NLTK StanfordSegmenter: Arbitrary Code Execution via Untrusted JAR Loading -red?style=for-the-badge -brightgreen?style=for-the-badge Overview Field| Details ---|--- CVE ID| CVE-2026-0848 Package| nltk Natural Language Toolkit Registry| PyPI Affected Versions| = 3.9.2 Vulnerability...

CVE-2026-21157

Improper input validation in Bixby prior to version 4.0.85.6 allows privileged local attackers to launch arbitrary activity...

EUVD-2026-112562

Improper input validation in Bixby prior to version 4.0.85.6 allows privileged local attackers to launch arbitrary activity...

CVE-2026-21157

Improper input validation in Bixby prior to version 4.0.85.6 allows privileged local attackers to launch arbitrary activity. The vulnerability's root cause is linked to insufficient validation of input data. No specific exploitation details or exploit links are provided in the documents. Remediat...