EUVD-2026-48093

Contributor Cross Site Scripting XSS in LA-Studio Element Kit for Elementor = 1.6.2 versions...

EUVD-2026-48094

Author Cross Site Scripting XSS in HashThemes Demo Importer = 1.4.2 versions...

CVE-2026-65482

The CVE-2026-65482 entry concerns the WordPress LA-Studio Element Kit for Elementor plugin, affected in versions

EUVD-2026-48091

Contributor Cross Site Scripting XSS in TheGem = 5.11.1 versions...

CVE-2026-65480

CVE-2026-65480 : WordPress TheGem theme versions ≤ 5.11.1 have a Cross Site Scripting (XSS) vulnerability. The available records note a contributor-reported XSS but do not specify the vulnerable component, root cause, affected URLs, or remediation steps. CVSS‑3.1 metrics are provided (base score ...

CVE-2026-65473

CVE-2026-65473 affects the WordPress Virtue/Ascend/Pinnacle Toolkit plugin (versions

EUVD-2026-48085

Contributor Cross Site Scripting XSS in Virtue/Ascend/Pinnacle Toolkit = 4.9.12 versions...

CVE-2026-65470

CVE-2026-65470 describes a Cross Site Scripting (XSS) vulnerability in the WordPress Fluent Support plugin, affecting versions

EUVD-2026-48082

Contributor Cross Site Scripting XSS in Fluent Support = 2.3.0 versions...

EUVD-2026-48077

Contributor Cross Site Scripting XSS in JetElements For Elementor = 2.9.1.1 versions...

CVE-2026-65465

The CVE-2026-65465 entry concerns a Cross Site Scripting (XSS) vulnerability in WordPress JetElements For Elementor plugin versions <= 2.9.1.1. The CVSSv3.1 score is 6.5 (Medium) with network attack vector, low privileges, user interaction required, and changed scope. Impact is low on confiden...

CVE-2026-65449

Technical details about CVE-2026-65449 are not publicly available in the provided documents. Monitor for updates from official advisories and vendor patches.

EUVD-2026-48214

Contributor Cross Site Scripting XSS in MapSVG = 8.14.0 versions...

EUVD-2026-48205

Unauthenticated Cross Site Scripting XSS in Form Vibes – Database Manager for Forms = 1.5.2 versions...

CVE-2026-61947

The CVE covers WordPress Form Vibes – Database Manager for Forms plugin (

CVE-2026-61944

The CVE-2026-61944 entry concerns an unauthenticated Cross Site Scripting (XSS) vulnerability in the WordPress Bookly plugin, affecting versions up to 27.7. The issue lies in the Bookly plugin for WordPress and is exploitable over the network with user interaction required. CVSS v3.1 metrics indi...

EUVD-2026-48203

Unauthenticated Cross Site Scripting XSS in Bookly = 27.7 versions...

EUVD-2026-48188

Unauthenticated Cross Site Scripting XSS in Easy Form Builder = 4.0.12 versions...

CVE-2026-59517

CVE-2026-59517 concerns the WordPress plugin Easy Form Builder (versions <= 4.0.12). The supplied documents confirm an unauthenticated Cross-Site Scripting (XSS) vulnerability affecting this plugin, with the affected component/version explicitly stated as Easy Form Builder

EUVD-2026-48186

Subscriber Cross Site Scripting XSS in Masteriyo - LMS = 2.3.0 versions...