CVE-2026-118328

An improper input validation flaw was found in the WebRTC component of the Chromium browser. Upstream bugs: https://issues.chromium.org/issues/570927027...

CVE-2026-118315

An improper input validation flaw was found in the SVG component of the Chromium browser. Upstream bugs: https://issues.chromium.org/issues/575184164...

CVE-2026-118314

An improper input validation flaw was found in the UI component of the Chromium browser. Upstream bugs: https://issues.chromium.org/issues/574803484...

CVE-2026-118304

An improper input validation flaw was found in the SVG component of the Chromium browser. Upstream bugs: https://issues.chromium.org/issues/574101376...

CVE-2026-118355

An improper input validation flaw was found in the Command component of the Chromium browser. Upstream bugs: https://issues.chromium.org/issues/570638833...

CVE-2026-118332

An improper input validation flaw was found in the Compositing component of the Chromium browser. Upstream bugs: https://issues.chromium.org/issues/574030524...

CVE-2026-118321

An improper input validation flaw was found in the Core component of the Chromium browser. Upstream bugs: https://issues.chromium.org/issues/568937139...

CVE-2026-118316

An improper input validation flaw was found in the V8 component of the Chromium browser. Upstream bugs: https://issues.chromium.org/issues/574223268...

CVE-2026-118310

An improper input validation flaw was found in the Views component of the Chromium browser. Upstream bugs: https://issues.chromium.org/issues/574516887...

CVE-2026-118309

An improper input validation flaw was found in the UI component of the Chromium browser. Upstream bugs: https://issues.chromium.org/issues/576133777...

CVE-2026-118097 WordPress Flash & HTML5 Video plugin <= 2.14.0 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in bPlugins Flash & HTML5 Video html5-video-player allows Stored XSS.This issue affects Flash & HTML5 Video: from n/a through 2.14.0...

CVE-2026-118097

The bPlugins Flash & HTML5 Video WordPress plugin (specifically the html5-video-player component) is vulnerable to Stored Cross-Site Scripting (XSS) . This flaw is caused by improper neutralization of input during web page generation. The vulnerability affects versions up to and including 2.14.0 ...

CVE-2026-114706 WordPress Strong Testimonials plugin <= 3.3.15 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in WP Chill Strong Testimonials strong-testimonials allows Stored XSS.This issue affects Strong Testimonials: from n/a through 3.3.15...

CVE-2026-114706

The WP Chill Strong Testimonials WordPress plugin (versions 3.3.15 and below ) is vulnerable to Stored Cross-Site Scripting (XSS) . This vulnerability arises from the improper neutralization of input during web page generation , which could allow an attacker to execute malicious scripts in the co...

CVE-2026-118095 WordPress Media LIbrary Assistant plugin <= 3.42 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in David Lingren Media LIbrary Assistant media-library-assistant allows DOM-Based XSS.This issue affects Media LIbrary Assistant: from n/a through 3.42...

CVE-2026-118095

The David Lingren Media LIbrary Assistant WordPress plugin (versions up to and including 3.42 ) is vulnerable to a DOM-Based Cross-Site Scripting (XSS) flaw. This issue stems from the improper neutralization of input during web page generation. While specific exploit details or a remediation patc...

CVE-2026-116849 WordPress StreamCast plugin <= 2.4.6 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in bPlugins StreamCast streamcast allows Stored XSS.This issue affects StreamCast: from n/a through 2.4.6...

CVE-2026-116849

The bPlugins StreamCast WordPress plugin (versions

CVE-2026-39737 WordPress JetElements For Elementor plugin <= 2.9.2.6 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Crocoblock JetElements For Elementor jet-elements allows Stored XSS.This issue affects JetElements For Elementor: from n/a through 2.9.2.6...

CVE-2026-39737

The Crocoblock JetElements For Elementor WordPress plugin (versions through 2.9.2.6 ) is vulnerable to a Stored Cross-site Scripting (XSS) flaw. The root cause is the improper neutralization of input during web page generation. An attacker could potentially execute malicious scripts in the contex...