CVE-2026-95529

Unauthenticated Cross Site Scripting XSS in Calculated Fields Form = 5.5.1.1 versions...

CVE-2026-95530

Subscriber Cross Site Scripting XSS in PixelYourSite – Your smart PIXEL TAG Manager = 11.4.1 versions...

CVE-2026-95515

Unauthenticated Cross Site Scripting XSS in Ninja Forms = 3.15.3 versions...

CVE-2026-94680

Contributor Cross Site Scripting XSS in The Post Grid = 7.9.5 versions...

CVE-2026-94500

Contributor Cross Site Scripting XSS in ElementsKit Elementor addons Lite = 4.0.5 versions...

CVE-2026-94391

Contributor Cross Site Scripting XSS in Ultimate FAQ = 2.4.14 versions...

CVE-2026-94461

Contributor Cross Site Scripting XSS in Ditty = 3.1.69 versions...

CVE-2026-94179

Unauthenticated Cross Site Scripting XSS in Razorpay Payment Button = 2.4.9 versions...

CVE-2026-94118

Contributor Cross Site Scripting XSS in Premium Blocks – Gutenberg Blocks for WordPress = 2.3.17 versions...

CVE-2026-93772

Subscriber Cross Site Scripting XSS in wpForo Forum = 3.1.5 versions...

CVE-2026-93774

Unauthenticated Cross Site Scripting XSS in WP Photo Album Plus = 9.3.02.002 versions...

CVE-2026-93622

Unauthenticated Cross Site Scripting XSS in WPS Limit Login = 1.5.9.3 versions...

CVE-2026-93526

Unauthenticated Cross Site Scripting XSS in Event Tickets = 5.29.4 versions...

CVE-2026-77394

OpenC3 COSMOS provides the functionality needed to send commands to and receive data from one or more embedded systems. From 5.0.6 until 7.3.0, an authenticated actor with systemset permission can store a shared screen through POST /openc3-api/screen whose BUTTON widget action is evaluated by...

EUVD-2026-85571

A flaw was found in Red Hat Ansible Automation Platform's automation- controller. The HTML view of job, ad hoc command, project update, and inventory update standard output escapes HTML metacharacters but does not remove ANSI terminal escape sequences before conversion to HTML. An ANSI OSC 8...

EUVD-2026-85499

Contributor Cross Site Scripting XSS in Ultimate Addons for Contact Form 7 = 3.5.50 versions...

CVE-2026-95586

The Ultimate Addons for Contact Form 7 WordPress plugin (versions

CVE-2026-95529

The Calculated Fields Form plugin for WordPress is vulnerable to an unauthenticated Cross Site Scripting (XSS) flaw in versions

CVE-2026-95530

The PixelYourSite – Your smart PIXEL (TAG) Manager WordPress plugin is vulnerable to a Subscriber Cross Site Scripting (XSS) flaw in versions

EUVD-2026-85498

Subscriber Cross Site Scripting XSS in PixelYourSite – Your smart PIXEL TAG Manager = 11.4.1 versions...