CVE-2026-66664 WordPress SEO plugin by Squirrly SEO plugin <= 14.2.0 - Cross Site Scripting (XSS) vulnerability

Unauthenticated Cross Site Scripting XSS in SEO Plugin by Squirrly SEO = 14.2.0 versions...

CVE-2026-66663

CVE-2026-66663 describes an Unauthenticated Cross Site Scripting (XSS) vulnerability in the WordPress plugin WP Data Access (versions

CVE-2026-66663

Unauthenticated Cross Site Scripting XSS in WP Data Access = 5.5.79 versions...

CVE-2026-66663 WordPress WP Data Access plugin <= 5.5.79 - Cross Site Scripting (XSS) vulnerability

Unauthenticated Cross Site Scripting XSS in WP Data Access = 5.5.79 versions...

CVE-2026-66663 WordPress WP Data Access plugin <= 5.5.79 - Cross Site Scripting (XSS) vulnerability

Unauthenticated Cross Site Scripting XSS in WP Data Access = 5.5.79 versions...

EUVD-2026-53889

Unauthenticated Cross Site Scripting XSS in WP Data Access = 5.5.79 versions...

CVE-2026-66457 WordPress Events Manager plugin <= 7.4.2 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Pixelite Events Manager events-manager allows Reflected XSS.This issue affects Events Manager: from n/a through 7.4.2...

EUVD-2026-53886

Unauthenticated Cross Site Scripting XSS in Events Manager = 7.4.1 versions...

CVE-2026-66457

The Pixelite Events Manager plugin for WordPress (versions n/a through 7.4.2 ) is vulnerable to Reflected Cross-site Scripting (XSS) due to the improper neutralization of input during web page generation. This vulnerability allows an unauthenticated attacker to inject malicious scripts into web p...

CVE-2026-66457

Unauthenticated Cross Site Scripting XSS in Events Manager = 7.4.1 versions...

CVE-2026-66457 WordPress Events Manager plugin <= 7.4.2 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Pixelite Events Manager events-manager allows Reflected XSS.This issue affects Events Manager: from n/a through 7.4.2...

CVE-2026-66439

Unauthenticated Cross Site Scripting XSS in Advanced AJAX Product Filters = 3.2.0.3 versions...

CVE-2026-66439

The Advanced AJAX Product Filters WordPress plugin (versions

EUVD-2026-53881

Unauthenticated Cross Site Scripting XSS in Advanced AJAX Product Filters = 3.2.0.3 versions...

CVE-2026-66439 WordPress Advanced AJAX Product Filters plugin <= 3.2.0.3 - Cross Site Scripting (XSS) vulnerability

Unauthenticated Cross Site Scripting XSS in Advanced AJAX Product Filters = 3.2.0.3 versions...

CVE-2026-66440

The CVE-2026-66440 entry documents an Unauthenticated Cross-Site Scripting (XSS) vulnerability in the WPIDE – File Manager & Code Editor WordPress plugin up to version 3.5.7. Affected component is the plugin’s WPIDE File Manager/Code Editor functionality; the flaw is an XSS issue exploitable with...

EUVD-2026-53882

Unauthenticated Cross Site Scripting XSS in WPIDE – File Manager & Code Editor = 3.5.7 versions...

CVE-2026-66439 WordPress Advanced AJAX Product Filters plugin <= 3.2.0.3 - Cross Site Scripting (XSS) vulnerability

Unauthenticated Cross Site Scripting XSS in Advanced AJAX Product Filters = 3.2.0.3 versions...

CVE-2026-65565

Unauthenticated Cross Site Scripting XSS in Survey Maker = 5.2.3.3 versions...

CVE-2026-65565

CVE-2026-65565 is an unauthenticated Cross Site Scripting (XSS) vulnerability affecting the WordPress Survey Maker plugin up to version 5.2.3.3. The initial data provides CVSSv3.1 base score 7.1 (HIGH) with NETWORK attack vector, LOW impact on confidentiality/integrity/availability, and user inte...