CVE-2026-114697 WordPress QA Analytics plugin <= 5.3.0.1 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in QuarkA QA Analytics qa-heatmap-analytics allows Stored XSS.This issue affects QA Analytics: from n/a through 5.3.0.1...

CVE-2026-114697 WordPress QA Analytics plugin <= 5.3.0.1 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in QuarkA QA Analytics qa-heatmap-analytics allows Stored XSS.This issue affects QA Analytics: from n/a through 5.3.0.1...

CVE-2026-112869

The Noah Hearle We’re Open! WordPress plugin is vulnerable to a Reflected Cross-Site Scripting (XSS) vulnerability (CWE-79) in versions n/a through 2.6 . The flaw stems from the Improper Neutralization of Input During Web Page Generation , which could allow an attacker to execute scripts in a use...

CVE-2026-112844

The Arraytics WP Event Solution (wp-event-solution) WordPress plugin versions 4.1.26 and below are susceptible to a Stored Cross-Site Scripting (XSS) vulnerability. This issue is caused by the improper neutralization of input during web page generation. An attacker could potentially exploit this ...

CVE-2026-112869 WordPress We’re Open! plugin <= 2.6 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Noah Hearle We’re Open! opening-hours allows Reflected XSS.This issue affects We’re Open!: from n/a through 2.6...

CVE-2026-112844 WordPress WP Event Solution plugin <= 4.1.26 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Arraytics WP Event Solution wp-event-solution allows Stored XSS.This issue affects WP Event Solution: from n/a through 4.1.26...

CVE-2026-112869 WordPress We’re Open! plugin <= 2.6 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Noah Hearle We’re Open! opening-hours allows Reflected XSS.This issue affects We’re Open!: from n/a through 2.6...

CVE-2026-114179 WordPress BP Better Messages plugin <= 3.1.3 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in wordplus BP Better Messages bp-better-messages allows DOM-Based XSS.This issue affects BP Better Messages: from n/a through 3.1.3...

CVE-2026-112844 WordPress WP Event Solution plugin <= 4.1.26 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Arraytics WP Event Solution wp-event-solution allows Stored XSS.This issue affects WP Event Solution: from n/a through 4.1.26...

PT-2026-122594

OpenResty lua-resty-dns before 0.24 contains an improper input validation vulnerability in parse section and decode name that fails to check resource record lengths against the received message. Attackers controlling or spoofing a queried nameserver can send truncated record headers or RDATA,...

Linux Distros Unpatched Vulnerability : CVE-2026-116013

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - OpenResty lua-resty-dns before 0.24 contains an improper input validation vulnerability in parsesection and decodename that fails to check resource record lengt...

WordPress All-in-One Video Gallery cross-site scripting vulnerability

WordPress All-in-One Video Gallery versions 4.9.7 and earlier contain a cross-site scripting vulnerability. This vulnerability stems from improper input handling during web page generation and may lead to stored cross-site scripting attacks...

Infomaniak Network VOD Infomaniak Cross-site Scripting Vulnerability

Infomaniak Network VOD: Infomaniak versions 1.5.14 and earlier contain a cross-site scripting vulnerability. This vulnerability stems from improper input handling during web page generation and may lead to stored cross-site scripting attacks...

WordPress Ad Inserter cross-site scripting vulnerability

WordPress Ad Inserter versions 2.8.18 and earlier contain a cross-site scripting vulnerability. This flaw stems from improper input handling during web page generation and makes it susceptible to reflected cross-site scripting attacks...

NetScaler ADC and Gateway 14.1-73.36 Check

NetScaler ADC and Gateway versions before 14.1-73.37 and 13.1-64.23 contain an improper input validation vulnerability that permits unauthenticated command execution. The supplied offline tool assesses reported builds against applicable fixed versions...

Noah Hearle Cross-site Scripting Vulnerability

Noah Hearle: Versions 2.6 and earlier of “We’re Open” contain a cross-site scripting vulnerability caused by improper input handling during web page generation; this makes them susceptible to reflected XSS attacks...

Exploit for Improper Input Validation in Citrix Netscaler_Application_Delivery_Controller

netscaler-cve-2026-88774-check Standal...

CVE-2026-112863 WordPress KALLYAS theme <= 4.25.0 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Hogash KALLYAS kallyas allows Reflected XSS.This issue affects KALLYAS: from n/a through 4.25.0...

CVE-2026-112863 WordPress KALLYAS theme <= 4.25.0 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Hogash KALLYAS kallyas allows Reflected XSS.This issue affects KALLYAS: from n/a through 4.25.0...

CVE-2026-112863

The Hogash KALLYAS WordPress theme is vulnerable to a Reflected Cross-Site Scripting (XSS) flaw due to the improper neutralization of input during web page generation . This vulnerability affects KALLYAS versions up to and including 4.25.0 . Exploitation of this flaw could allow an attacker to ex...