CVE-2026-114697

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in QuarkA QA Analytics qa-heatmap-analytics allows Stored XSS.This issue affects QA Analytics: from n/a through 5.3.0.1...

CVE-2026-114694

The Pixelite Events Manager WordPress plugin (versions through 7.4.8 ) is vulnerable to a Reflected Cross-Site Scripting (XSS) vulnerability due to the Improper Neutralization of Input During Web Page Generation . This flaw allows an attacker to inject malicious scripts into web pages. No specifi...

CVE-2026-114695 WordPress VOD Infomaniak plugin <= 1.5.14 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Infomaniak Network VOD Infomaniak vod-infomaniak allows Stored XSS.This issue affects VOD Infomaniak: from n/a through 1.5.14...

CVE-2026-114697

The WordPress QA Analytics plugin (qa-heatmap-analytics) is vulnerable to Stored Cross-Site Scripting (XSS) in versions up to and including 5.3.0.1 . The root cause is the improper neutralization of input during web page generation. This vulnerability allows an attacker to store malicious scripts...

CVE-2026-114697 WordPress QA Analytics plugin <= 5.3.0.1 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in QuarkA QA Analytics qa-heatmap-analytics allows Stored XSS.This issue affects QA Analytics: from n/a through 5.3.0.1...

CVE-2026-112844

The Arraytics WP Event Solution (wp-event-solution) WordPress plugin versions 4.1.26 and below are susceptible to a Stored Cross-Site Scripting (XSS) vulnerability. This issue is caused by the improper neutralization of input during web page generation. An attacker could potentially exploit this ...

CVE-2026-112844 WordPress WP Event Solution plugin <= 4.1.26 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Arraytics WP Event Solution wp-event-solution allows Stored XSS.This issue affects WP Event Solution: from n/a through 4.1.26...

CVE-2026-112869

The Noah Hearle We’re Open! WordPress plugin is vulnerable to a Reflected Cross-Site Scripting (XSS) vulnerability (CWE-79) in versions n/a through 2.6 . The flaw stems from the Improper Neutralization of Input During Web Page Generation , which could allow an attacker to execute scripts in a use...

CVE-2026-112869 WordPress We’re Open! plugin <= 2.6 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Noah Hearle We’re Open! opening-hours allows Reflected XSS.This issue affects We’re Open!: from n/a through 2.6...

Sunshine Photo Cart <= 3.2.5 - Reflected Cross-Site Scripting

WP Sunshine Sunshine Photo Cart versions up to 3.2.5 contain a reflected cross-site scripting caused by improper input neutralization during web page generation, letting attackers execute malicious scripts in users' browsers, exploit requires attacker to craft malicious input. id: CVE-2024-43971...

CVE-2022-29380

CVE-2022-29380 CVE-2022-29380 Date: 25/05/2022 Author: OpenXP Team Software: Academy LMS Version: Academy LMS = v4.3 Type: Cross-Site Scripting OWASP TOP 10: A03:2021-Injection CWE: CWE-79 Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' References:...

CVE-2026-112863

The Hogash KALLYAS WordPress theme is vulnerable to a Reflected Cross-Site Scripting (XSS) flaw due to the improper neutralization of input during web page generation . This vulnerability affects KALLYAS versions up to and including 4.25.0 . Exploitation of this flaw could allow an attacker to ex...

CVE-2026-112863 WordPress KALLYAS theme <= 4.25.0 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Hogash KALLYAS kallyas allows Reflected XSS.This issue affects KALLYAS: from n/a through 4.25.0...

CVE-2026-112835 WordPress VikRentCar plugin <= 1.4.8 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in e4jvikwp VikRentCar vikrentcar allows Reflected XSS.This issue affects VikRentCar: from n/a through 1.4.8...

CVE-2026-112835

The VikRentCar WordPress plugin (versions

CVE-2026-112379

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Codepeople Contact Form Email contact-form-to-email allows Stored XSS.This issue affects Contact Form Email: from n/a through 1.3.68...

CVE-2026-114703 WordPress Extensions for Leaflet Map plugin <= 6.0 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in hupe13 Extensions for Leaflet Map extensions-leaflet-map allows Stored XSS.This issue affects Extensions for Leaflet Map: from n/a through 6.0...

CVE-2026-114703 WordPress Extensions for Leaflet Map plugin <= 6.0 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in hupe13 Extensions for Leaflet Map extensions-leaflet-map allows Stored XSS.This issue affects Extensions for Leaflet Map: from n/a through 6.0...

EUVD-2026-108083

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in nicdark ND Shortcodes For Visual Composer nd-shortcodes allows Stored XSS.This issue affects ND Shortcodes For Visual Composer: from n/a through 7.8...

EUVD-2026-108053

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Codepeople Contact Form Email contact-form-to-email allows Stored XSS.This issue affects Contact Form Email: from n/a through 1.3.68...