CVE-2026-94680

Contributor Cross Site Scripting XSS in The Post Grid = 7.9.5 versions...

CVE-2026-94500

Contributor Cross Site Scripting XSS in ElementsKit Elementor addons Lite = 4.0.5 versions...

CVE-2026-94391

Contributor Cross Site Scripting XSS in Ultimate FAQ = 2.4.14 versions...

CVE-2026-94461

Contributor Cross Site Scripting XSS in Ditty = 3.1.69 versions...

CVE-2026-94179

Unauthenticated Cross Site Scripting XSS in Razorpay Payment Button = 2.4.9 versions...

CVE-2026-94118

Contributor Cross Site Scripting XSS in Premium Blocks – Gutenberg Blocks for WordPress = 2.3.17 versions...

CVE-2026-93774

Unauthenticated Cross Site Scripting XSS in WP Photo Album Plus = 9.3.02.002 versions...

CVE-2026-93622

Unauthenticated Cross Site Scripting XSS in WPS Limit Login = 1.5.9.3 versions...

CVE-2026-93772

Subscriber Cross Site Scripting XSS in wpForo Forum = 3.1.5 versions...

CVE-2026-93526

Unauthenticated Cross Site Scripting XSS in Event Tickets = 5.29.4 versions...

CVE-2026-77394

OpenC3 COSMOS provides the functionality needed to send commands to and receive data from one or more embedded systems. From 5.0.6 until 7.3.0, an authenticated actor with systemset permission can store a shared screen through POST /openc3-api/screen whose BUTTON widget action is evaluated by...

EUVD-2026-85571

A flaw was found in Red Hat Ansible Automation Platform's automation- controller. The HTML view of job, ad hoc command, project update, and inventory update standard output escapes HTML metacharacters but does not remove ANSI terminal escape sequences before conversion to HTML. An ANSI OSC 8...

EUVD-2026-85499

Contributor Cross Site Scripting XSS in Ultimate Addons for Contact Form 7 = 3.5.50 versions...

CVE-2026-95586

The Ultimate Addons for Contact Form 7 WordPress plugin (versions

CVE-2026-95530 WordPress PixelYourSite – Your smart PIXEL (TAG) Manager plugin <= 11.4.1 - Cross Site Scripting (XSS) vulnerability

Subscriber Cross Site Scripting XSS in PixelYourSite – Your smart PIXEL TAG Manager = 11.4.1 versions...

CVE-2026-95529 WordPress Calculated Fields Form plugin <= 5.5.1.1 - Cross Site Scripting (XSS) vulnerability

Unauthenticated Cross Site Scripting XSS in Calculated Fields Form = 5.5.1.1 versions...

CVE-2026-95529 WordPress Calculated Fields Form plugin <= 5.5.1.1 - Cross Site Scripting (XSS) vulnerability

Unauthenticated Cross Site Scripting XSS in Calculated Fields Form = 5.5.1.1 versions...

EUVD-2026-85498

Subscriber Cross Site Scripting XSS in PixelYourSite – Your smart PIXEL TAG Manager = 11.4.1 versions...

CVE-2026-95530

The PixelYourSite – Your smart PIXEL (TAG) Manager WordPress plugin is vulnerable to a Subscriber Cross Site Scripting (XSS) flaw in versions

CVE-2026-95530 WordPress PixelYourSite – Your smart PIXEL (TAG) Manager plugin <= 11.4.1 - Cross Site Scripting (XSS) vulnerability

Subscriber Cross Site Scripting XSS in PixelYourSite – Your smart PIXEL TAG Manager = 11.4.1 versions...