PT-2026-71534

Unauthenticated Cross Site Scripting XSS in WP Full Stripe Free = 8.5.0 versions...

PT-2026-71509

Unauthenticated Cross Site Scripting XSS in Business Directory = 6.4.25 versions...

PT-2026-71600

Author Cross Site Scripting XSS in WP Data Access = 5.5.79 versions...

CVE-2026-66687: Improper Neutralization of Input During Web Page Generation

Customer Cross Site Scripting XSS in WpBookingly = 1.3.2 versions...

CVE-2026-73340: Improper Neutralization of Input During Web Page Generation

Contributor Cross Site Scripting XSS in Featured Image from URL = 5.3.3 versions...

PT-2026-71524

Unauthenticated Cross Site Scripting XSS in Visitors Traffic Real Time Statistics = 8.11 versions...

PT-2026-71558

Unauthenticated Cross Site Scripting XSS in Geo Mashup = 1.13.18 versions...

PT-2026-71517

Unauthenticated Cross Site Scripting XSS in Do Lasso = 358 versions...

PT-2026-76573

Name of the Vulnerable Software and Affected Versions Etherpad versions 2.1.0 through 3.0.0 Description Etherpad fails to properly sanitize the x-proxy-path request header, leading to two distinct issues when client-supplied headers reach the server. First, in src/node/hooks/express/admin.ts, the...

PT-2026-76434

These are all security issues fixed in the pgadmin4-9.17-1.1 package on the GA media of openSUSE Tumbleweed...

PT-2026-71593

Unauthenticated Cross Site Scripting XSS in Smart Online Order for Clover = 1.6.1 versions...

PT-2026-71563

Subscriber Cross Site Scripting XSS in Profile Extra Fields by BestWebSoft = 1.3.4 versions...

PT-2026-71527

Subscriber Cross Site Scripting XSS in AcyMailing SMTP Newsletter = 10.11.1 versions...

CVE-2026-28004: Improper Neutralization of Input During Web Page Generation

Unauthenticated Cross Site Scripting XSS in Business Directory = 6.4.25 versions...

PT-2026-71604

Donor Cross Site Scripting XSS in GiveWP 4.16.6 versions...

PT-2026-71592

Unauthenticated Cross Site Scripting XSS in SureDash = 1.10.1 versions...

PT-2026-71574

Unauthenticated Cross Site Scripting XSS in Local Delivery Drivers for WooCommerce = 3.0.0 versions...

CVE-2026-61960: Improper Neutralization of Input During Web Page Generation

Unauthenticated Cross Site Scripting XSS in WP Full Stripe Free = 8.5.0 versions...

CVE-2026-66471: Improper Neutralization of Input During Web Page Generation

Subscriber Cross Site Scripting XSS in Accordion = 3.0.6 versions...

PT-2026-71576

Subscriber Cross Site Scripting XSS in Accordion = 3.0.6 versions...