EUVD-2026-49236

Author Cross Site Scripting XSS in Orbit Fox by ThemeIsle = 3.0.7 versions...

CVE-2026-65561

Contributor Cross Site Scripting XSS in WordPress Social Login and Register = 7.8.0 versions...

EUVD-2026-49234

Contributor Cross Site Scripting XSS in WordPress Social Login and Register = 7.8.0 versions...

EUVD-2026-49232

Shop manager Cross Site Scripting XSS in Abandoned Cart Lite for WooCommerce = 6.8.0 versions...

CVE-2026-65557

Shop manager Cross Site Scripting XSS in Abandoned Cart Lite for WooCommerce = 6.8.0 versions...

CVE-2026-65557

CVE-2026-65557 concerns the WordPress plugin Abandoned Cart Lite for WooCommerce (versions <= 6.8.0), where a Cross Site Scripting (XSS) flaw affects the shop-manager context. The connected records confirm the affected product (WordPress WooCommerce plugin), the vulnerability type (XSS), and t...

CVE-2026-65557 WordPress Abandoned Cart Lite for WooCommerce plugin <= 6.8.0 - Cross Site Scripting (XSS) vulnerability

Shop manager Cross Site Scripting XSS in Abandoned Cart Lite for WooCommerce = 6.8.0 versions...

EUVD-2026-49226

Subscriber Cross Site Scripting XSS in RT Mega Menu – Mega Menu Builder for Elementor & Gutenberg = 1.5.1 versions...

CVE-2026-59559

Subscriber Cross Site Scripting XSS in RT Mega Menu – Mega Menu Builder for Elementor & Gutenberg = 1.5.1 versions...

EUVD-2026-49225

Unauthenticated Cross Site Scripting XSS in Booking Calendar = 11.4.2 versions...

CVE-2026-59558

The CVE-2026-59558 entry documents an unauthenticated Cross Site Scripting (XSS) vulnerability in the WordPress Booking Calendar plugin, affected versions &lt;= 11.4.2. The issue concerns the Booking Calendar component/functionality and is characterized by unauthenticated XSS, allowing an attacke...

CVE-2026-59558 WordPress Booking Calendar plugin <= 11.4.2 - Cross Site Scripting (XSS) vulnerability

Unauthenticated Cross Site Scripting XSS in Booking Calendar = 11.4.2 versions...

CVE-2026-59558

Unauthenticated Cross Site Scripting XSS in Booking Calendar = 11.4.2 versions...

EUVD-2026-49223

Unauthenticated Cross Site Scripting XSS in Dynamic Pricing With Discount Rules for WooCommerce = 4.5.11 versions...

CVE-2026-59556

Unauthenticated Cross Site Scripting XSS in Dynamic Pricing With Discount Rules for WooCommerce = 4.5.11 versions...

CVE-2026-59556 WordPress Dynamic Pricing With Discount Rules for WooCommerce plugin <= 4.5.11 - Cross Site Scripting (XSS) vulnerability

Unauthenticated Cross Site Scripting XSS in Dynamic Pricing With Discount Rules for WooCommerce = 4.5.11 versions...

CVE-2026-59556

CVE-2026-59556 : Unauthenticated Cross Site Scripting (XSS) in the WordPress plugin Dynamic Pricing With Discount Rules for WooCommerce (versions

CVE-2026-59553

Unauthenticated Cross Site Scripting XSS in Product Feed Manager = 7.6.1 versions...

CVE-2026-59553 WordPress Product Feed Manager plugin <= 7.6.1 - Cross Site Scripting (XSS) vulnerability

Unauthenticated Cross Site Scripting XSS in Product Feed Manager = 7.6.1 versions...

EUVD-2026-49222

Unauthenticated Cross Site Scripting XSS in Product Feed Manager = 7.6.1 versions...