CVE-2026-62138

A Contributor-level Cross Site Scripting (XSS) vulnerability affects the Visual Composer Website Builder WordPress plugin in versions ≤ 45.16.1 . The flaw, discovered by sungbyeongchan, allows an attacker with Contributor privileges to inject malicious scripts via user interaction. The CVSS 3.1 s...

CVE-2026-62138 WordPress Visual Composer Website Builder plugin <= 45.16.1 - Cross Site Scripting (XSS) vulnerability

Contributor Cross Site Scripting XSS in Visual Composer Website Builder = 45.16.1 versions...

CVE-2026-62138 WordPress Visual Composer Website Builder plugin <= 45.16.1 - Cross Site Scripting (XSS) vulnerability

Contributor Cross Site Scripting XSS in Visual Composer Website Builder = 45.16.1 versions...

EUVD-2026-76199

Contributor Cross Site Scripting XSS in Visual Composer Website Builder = 45.16.1 versions...

CVE-2026-62111 WordPress Simple Payment plugin <= 2.5.4 - Cross Site Scripting (XSS) vulnerability

Contributor Cross Site Scripting XSS in Simple Payment = 2.5.4 versions...

CVE-2026-62111

CVE-2026-62111 affects the WordPress Simple Payment plugin in versions 2.5.4 and below . The vulnerability is a Contributor-level Cross-Site Scripting (XSS) flaw, discovered by V1T via Patchstack. It carries a CVSS 3.1 score of 6.5 (MEDIUM) with a changed scope, requiring low privileges and user ...

EUVD-2026-76209

Contributor Cross Site Scripting XSS in Simple Payment = 2.5.4 versions...

CVE-2026-62111 WordPress Simple Payment plugin <= 2.5.4 - Cross Site Scripting (XSS) vulnerability

Contributor Cross Site Scripting XSS in Simple Payment = 2.5.4 versions...

CVE-2026-62110

CVE-2026-62110 is a Contributor-level Cross-Site Scripting (XSS) vulnerability in the Bold Page Builder WordPress plugin, affecting versions 5.9.9 and earlier . The flaw was discovered by LevinityCyber and assigned a CVSS 3.1 score of 6.5 (MEDIUM) with a changed scope, requiring user interaction ...

EUVD-2026-76210

Contributor Cross Site Scripting XSS in Bold Page Builder = 5.9.9 versions...

CVE-2026-62110 WordPress Bold Page Builder plugin <= 5.9.9 - Cross Site Scripting (XSS) vulnerability

Contributor Cross Site Scripting XSS in Bold Page Builder = 5.9.9 versions...

CVE-2026-7298 Reflected XSS in IdeaSoft's Smart E-Commerce

Improper neutralization of input during web page generation 'cross-site scripting' vulnerability in IdeaSoft Software Industry and Trade Inc. Smart E-Commerce allows Reflected XSS. This issue affects Smart E-Commerce: before 8.4.2.0...

WordPress Advanced Customized Prompts plugin <= 1.0.1 - Subscriber+ Stored XSS vulnerability

Subscriber+ Stored XSS vulnerability discovered by 0xBassia in WordPress Plugin Advanced Customized Prompts versions = 1.0.1...

Microsoft Edge (Chromium-based) Spoofing Vulnerability

Improper neutralization of input during web page generation 'cross-site scripting' in Microsoft Edge Chromium-based allows an unauthorized attacker to perform spoofing over a network...

RLSA-2026:66432 Important: osbuild-composer security update

A service for building customized OS artifacts, such as VM images and OSTree commits, that uses osbuild under the hood. Besides building images for local usage, it can also upload images directly to cloud. It is compatible with composer-cli and cockpit-composer clients. Security Fixes:...

osbuild-composer security update

An update is available for osbuild-composer. This update affects Rocky Linux 10. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list A service for building customized OS artifacts, such as VM images a...

Exploit for CVE-2026-78997

CVE-2026-78997 — UC Browser for Android Universal XSS UXSS...

WordPress HUSKY plugin <= 1.4.3 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by Kuba in WordPress Plugin HUSKY versions = 1.4.3...

WordPress Vigilant plugin <= 2.10.2 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by Sebastian Albrecht in WordPress Plugin Vigilant versions = 2.10.2...

WordPress Simple Ajax Chat plugin <= 20260811 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by HEI LAI SZE in WordPress Plugin Simple Ajax Chat versions = 20260811...