CVE-2026-125831

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in IdeaBox Creations PowerPack Lite for Beaver Builder powerpack-addon-for-beaver-builder allows Stored XSS.This issue affects PowerPack Lite for Beaver Builder: from n/a through 1.3.2...

CVE-2026-125824

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in WP Go Maps WP Go Maps wp-google-maps allows Stored XSS.This issue affects WP Go Maps: from n/a through 10.1.10...

CVE-2026-125794

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in hupe13 Extension for Leaflet Map extensions-leaflet-map allows Stored XSS.This issue affects Extension for Leaflet Map: from n/a through 6.1.1...

CVE-2026-124420

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Themeisle Woody ad snippets insert-php allows Reflected XSS.This issue affects Woody ad snippets: from n/a through 2.7.10...

CVE-2026-124418 WordPress WP Job Portal plugin <= 2.7.2 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Ahmad WP Job Portal wp-job-portal allows Stored XSS.This issue affects WP Job Portal: from n/a through 2.7.2...

CVE-2026-124418

The Ahmad WP Job Portal (wp-job-portal) WordPress plugin, in versions 2.7.2 and below , is vulnerable to a Stored Cross-Site Scripting (XSS) flaw. The vulnerability is caused by Improper Neutralization of Input During Web Page Generation , which allows an attacker to inject malicious scripts that...

CVE-2026-124420 WordPress Woody ad snippets plugin <= 2.7.10 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Themeisle Woody ad snippets insert-php allows Reflected XSS.This issue affects Woody ad snippets: from n/a through 2.7.10...

CVE-2026-124260 WordPress WP Photo Album Plus plugin <= 9.3.06.001 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Jacob N. Breetvelt WP Photo Album Plus wp-photo-album-plus allows Reflected XSS.This issue affects WP Photo Album Plus: from n/a through 9.3.06.001...

CVE-2026-125837 WordPress Make theme <= 1.10.10 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in thethemefoundry Make make allows Reflected XSS.This issue affects Make: from n/a through 1.10.10...

CVE-2026-125854 WordPress Unbounce Landing Pages plugin <= 1.1.6 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Unbounce Unbounce Landing Pages unbounce allows Stored XSS.This issue affects Unbounce Landing Pages: from n/a through 1.1.6...

CVE-2026-125854

The WordPress Unbounce Landing Pages plugin (versions

CVE-2026-125452

The Denishua WPJAM Basic WordPress plugin (versions 7.1.2 and below ) is vulnerable to a Reflected Cross-Site Scripting (XSS) flaw. This vulnerability arises from the improper neutralization of input during web page generation, allowing an attacker to execute arbitrary scripts in a user's browser...

CVE-2026-125831 WordPress PowerPack Lite for Beaver Builder plugin <= 1.3.2 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in IdeaBox Creations PowerPack Lite for Beaver Builder powerpack-addon-for-beaver-builder allows Stored XSS.This issue affects PowerPack Lite for Beaver Builder: from n/a through 1.3.2...

CVE-2026-125831

The PowerPack Lite for Beaver Builder WordPress plugin (versions

CVE-2026-125835

The Crocoblock JetTabs WordPress plugin (versions

CVE-2026-125835 WordPress JetTabs plugin <= 2.3.5 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Crocoblock JetTabs jet-tabs allows Stored XSS.This issue affects JetTabs: from n/a through 2.3.5...

CVE-2026-125807

The HT Mega (ht-mega-for-elementor) WordPress plugin versions through 3.2.8 is susceptible to a Stored Cross-Site Scripting (XSS) vulnerability. The issue stems from the improper neutralization of input during web page generation , which could allow an attacker to execute malicious scripts in the...

CVE-2026-125807 WordPress HT Mega plugin <= 3.2.8 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in HTMega HT Mega ht-mega-for-elementor allows Stored XSS.This issue affects HT Mega: from n/a through 3.2.8...

CVE-2026-125824

The WP Go Maps WordPress plugin (versions

CVE-2026-125824 WordPress WP Go Maps plugin <= 10.1.10 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in WP Go Maps WP Go Maps wp-google-maps allows Stored XSS.This issue affects WP Go Maps: from n/a through 10.1.10...