CVE-2026-94077 WordPress Safe SVG plugin <= 2.5.0 - Cross Site Scripting (XSS) vulnerability

Contributor Cross Site Scripting XSS in Safe SVG = 2.5.0 versions...

CVE-2026-94077 WordPress Safe SVG plugin <= 2.5.0 - Cross Site Scripting (XSS) vulnerability

Contributor Cross Site Scripting XSS in Safe SVG = 2.5.0 versions...

CVE-2026-93770 WordPress WP Statistics plugin <= 14.16.13 - Cross Site Scripting (XSS) vulnerability

Unauthenticated Cross Site Scripting XSS in WP Statistics = 14.16.13 versions...

CVE-2026-62079 WordPress Qi Addons For Elementor plugin <= 1.11 - Cross Site Scripting (XSS) vulnerability

Contributor Cross Site Scripting XSS in Qi Addons For Elementor = 1.11 versions...

CVE-2026-62079

The Qi Addons For Elementor WordPress plugin, affecting versions

CVE-2026-27371 WordPress WPFunnels plugin <= 3.13.1 - Reflected Cross Site Scripting (XSS) vulnerability

Unauthenticated Cross Site Scripting XSS in WPFunnels = 3.13.1 versions...

CVE-2026-62078

The Premium Addons for Elementor WordPress plugin, in versions

CVE-2026-62078 WordPress Premium Addons for Elementor plugin <= 4.11.105 - Cross Site Scripting (XSS) vulnerability

Contributor Cross Site Scripting XSS in Premium Addons for Elementor = 4.11.105 versions...

EUVD-2026-89817

Contributor Cross Site Scripting XSS in Premium Addons for Elementor = 4.11.105 versions...

CVE-2026-27371

The WPFunnels plugin for WordPress versions

WordPress OAuth Server plugin <= 4.5.1 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by Ananda Dhakal Patchstack in WordPress Plugin OAuth Server versions = 4.5.1...

CVE-2026-93908

The Real Estate Manager – Property Listing and Agent Management plugin for WordPress is vulnerable to Stored Cross-Site Scripting (XSS) in all versions up to and including 7.3 . The flaw exists in the 'before_price_text' parameter due to insufficient input sanitization and output escaping. Specif...

EUVD-2026-89663

Stored Cross-Site Scripting via custom content descriptions vulnerability exists in baserCMS . If this vulnerability is exploited, an arbitrary script may be executed in the user's web browser may be caused...

CVE-2026-93463

A cross-site scripting vulnerability via script validation bypass exists in baserCMS. If this vulnerability is exploited, an arbitrary script may be executed in the user's web browser...

EUVD-2026-89661

Cross-Site Scripting via Script Validation Bypass exists in baserCMS. If this vulnerability is exploited, an arbitrary script may be executed in the user's web browser may be caused...

CVE-2026-102586

A flaw was found in Moodle. Insufficient sanitization of username input on the password reset page allows a remote attacker to conduct a cross-site scripting XSS attack. By convincing an unauthenticated user to access a specially crafted password reset link, an attacker could execute arbitrary...

CVE-2023-0214

SWG Exploit Generator ██████╗ ██████╗ ████████╗███████╗ ██╔═████╗██╔══██╗╚══██╔══╝██╔════╝ ██║██╔██║██████╔╝ ██║ ███████╗ ████╔╝██║██╔═══╝ ██║ ╚════██║ ╚██████╔╝██║ ██║ ███████║ ╚═════╝ ╚═╝ ╚═╝ ╚══════╝ by 0PTS Skyhigh Secure Web Gateway（旧McAfee Web Gateway）におけるHTTP Response Splitting脆弱性のProof of...

CVE-2026-91832 WP Mobile Menu 2.7.4 - 2.8.8 - Stored XSS via CSRF

The WP Mobile Menu WordPress plugin before 2.9 does not correctly verify the nonce on its settings import, so an attacker can import arbitrary WP Mobile Menu WordPress plugin before 2.9 settings through a cross-site request in an administrator's session, and the imported values are then output...

CVE-2026-103047

A flaw was found in the MediaWiki CentralAuth extension. Improper neutralization of input in internationalization i18n messages allows a remote attacker to conduct stored Cross-Site Scripting XSS attacks. If exploited, malicious scripts execute within an unsuspecting user's browser session,...

CVE-2025-70368

CVE-2025-70368 项目更新功能中的存储型跨站脚本（XSS）漏洞 | Worklenz 面向高效团队的一体化项目管理工具 ---|--- 📜 描述 Worklenz 版本 2.1.5 在项目更新功能中存在一个存储型跨站脚本（XSS）漏洞。攻击者可以在更新文本字段中提交恶意载荷，该载荷随后在报告视图中未经适当过滤即被渲染。当受害者浏览包含该漏洞字段的页面时，恶意 JavaScript 可能会在受害者的浏览器中执行。 🔍 受影响版本 状态| 版本 ---|--- 🔴 受影响| 2.1.5 🛠️ 复现步骤 1️⃣ 导航至 项目 → "项目名称" → 更新 2️⃣ 输入以下载荷： 3️⃣...