23966 matches found
CVE-2026-39737 WordPress JetElements For Elementor plugin <= 2.9.2.6 - Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Crocoblock JetElements For Elementor jet-elements allows Stored XSS.This issue affects JetElements For Elementor: from n/a through 2.9.2.6...
CVE-2026-39737
The Crocoblock JetElements For Elementor WordPress plugin (versions through 2.9.2.6 ) is vulnerable to a Stored Cross-site Scripting (XSS) flaw. The root cause is the improper neutralization of input during web page generation. An attacker could potentially execute malicious scripts in the contex...
CVE-2026-115610
The PublishPress PublishPress Authors WordPress plugin (versions up to and including 4.17.0 ) is susceptible to a Stored Cross-site Scripting (XSS) vulnerability. The root cause is the Improper Neutralization of Input During Web Page Generation . This flaw allows an attacker to store malicious sc...
CVE-2026-115610 WordPress PublishPress Authors plugin <= 4.17.0 - Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in PublishPress PublishPress Authors publishpress-authors allows Stored XSS.This issue affects PublishPress Authors: from n/a through 4.17.0...
CVE-2026-116857
The Crocoblock JetSmartFilters plugin (versions
CVE-2026-116857 WordPress JetSmartFilters plugin <= 3.8.6.2 - Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Crocoblock JetSmartFilters jet-smart-filters allows Stored XSS.This issue affects JetSmartFilters: from n/a through 3.8.6.2...
EUVD-2026-112812
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in bPlugins PDF Poster pdf-poster allows Stored XSS.This issue affects PDF Poster: from n/a through 2.6.1...
CVE-2026-48195 WordPress PDF Poster plugin <= 2.6.1 - Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in bPlugins PDF Poster pdf-poster allows Stored XSS.This issue affects PDF Poster: from n/a through 2.6.1...
CVE-2026-24533 WordPress Cozy Blocks plugin <= 2.2.27 - Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in CozyThemes Cozy Blocks cozy-addons allows Stored XSS.This issue affects Cozy Blocks: from n/a through 2.2.27...
CVE-2026-24533
A Stored Cross-Site Scripting (XSS) vulnerability exists in the CozyThemes Cozy Blocks (cozy-addons) WordPress plugin, affecting versions up to and including 2.2.27 . The flaw stems from the Improper Neutralization of Input During Web Page Generation , which allows an attacker to inject and store...
CVE-2026-118087 WordPress Site Reviews plugin <= 8.3.5 - Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Gemini Labs Site Reviews site-reviews allows Stored XSS.This issue affects Site Reviews: from n/a through 8.3.5...
CVE-2026-118087
The Gemini Labs Site Reviews WordPress plugin is vulnerable to a Stored Cross-Site Scripting (XSS) vulnerability in versions up to and including 8.3.5 . The root cause is the improper neutralization of input during web page generation , which allows an attacker to inject malicious scripts into th...
CVE-2026-118094 WordPress Ad Inserter plugin <= 2.8.18 - Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Igor Funa Ad Inserter ad-inserter allows Stored XSS.This issue affects Ad Inserter: from n/a through 2.8.18...
CVE-2026-56056
The The Post Grid WordPress plugin (versions n/a through 7.9.7 ) is vulnerable to a Stored Cross-site Scripting (XSS) flaw due to improper neutralization of input during web page generation. This vulnerability allows an attacker to inject and execute malicious scripts in the context of the victim...
CVE-2026-115611
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in PluginUs.Net TableOn posts-table-filterable allows Reflected XSS.This issue affects TableOn: from n/a through 1.0.7...
CVE-2026-115611
The PluginUs.Net TableOn plugin for WordPress is vulnerable to a Reflected Cross-site Scripting (XSS) flaw in the posts-table-filterable component. This vulnerability is caused by improper neutralization of input during web page generation and affects versions from n/a through 1.0.7 . Exploitatio...
CVE-2026-115611 WordPress TableOn plugin <= 1.0.7 - Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in PluginUs.Net TableOn posts-table-filterable allows Reflected XSS.This issue affects TableOn: from n/a through 1.0.7...
chromium-browser: angle: ANGLE in Google Chrome: Arbitrary code execution via improper input validation
A flaw was found in ANGLE, a component of Google Chrome. Improper input validation could allow a remote attacker to execute arbitrary code outside of the browser's security sandbox by enticing a user to visit a specially crafted HTML page. This could lead to a complete compromise of the affected...
chromium-browser: angle: ANGLE in Google Chrome: Arbitrary code execution via improper input validation
A flaw was found in ANGLE, a component of Google Chrome. Improper input validation could allow a remote attacker to execute arbitrary code outside of the browser's security sandbox by enticing a user to visit a specially crafted HTML page. This could lead to a complete compromise of the affected...