CVE-2026-57656

The affected software is the WordPress plugin Hester Core (versions ≤ 1.1.8). The CVE-2026-57656 entry documents an Author Cross Site Scripting (XSS) vulnerability in Hester Core ≤ 1.1.8. Multiple connected sources (NVD, CVE List, EUVD, Patchstack) corroborate this issue. The provided documents d...

EUVD-2026-39766

Contributor Cross Site Scripting XSS in Ghost Kit = 3.6.0 versions...

CVE-2026-57651

The CVE-2026-57651 entry documents a Cross Site Scripting (XSS) vulnerability in the WordPress Ghost Kit plugin versions ≤ 3.6.0. The issue is described consistently across sources as Ghost Kit XSS, with a CVSS v3.1 base score of 6.5 (Medium) and an attack vector of Network, user interaction requ...

CVE-2026-57651 WordPress Ghost Kit plugin <= 3.6.0 - Cross Site Scripting (XSS) vulnerability

Contributor Cross Site Scripting XSS in Ghost Kit = 3.6.0 versions...

EUVD-2026-39765

Contributor Cross Site Scripting XSS in Magazine Blocks = 1.8.3 versions...

CVE-2026-57650

CVE-2026-57650: a cross-site scripting (XSS) vulnerability in WordPress Magazine Blocks plugin versions ≤ 1.8.3. The issue is described as a Contributor XSS across the Patchstack/NVD entries. CVSSv3.1 base score 6.5 (Medium): Network attack vector, low attack complexity, low privileges required, ...

CVE-2026-57650

Contributor Cross Site Scripting XSS in Magazine Blocks = 1.8.3 versions...

CVE-2026-57650 WordPress Magazine Blocks plugin <= 1.8.3 - Cross Site Scripting (XSS) vulnerability

Contributor Cross Site Scripting XSS in Magazine Blocks = 1.8.3 versions...

CVE-2026-57638 WordPress Fluent Booking plugin <= 2.1.0 - Cross Site Scripting (XSS) vulnerability

Contributor Cross Site Scripting XSS in Fluent Booking = 2.1.0 versions...

CVE-2026-57638

Contributor Cross Site Scripting XSS in Fluent Booking = 2.1.0 versions...

EUVD-2026-39754

Contributor Cross Site Scripting XSS in Fluent Booking = 2.1.0 versions...

CVE-2026-57638

CVE-2026-57638 concerns a Cross Site Scripting (XSS) vulnerability in the WordPress plugin Fluent Booking affecting versions

CVE-2026-57629 WordPress StatCounter plugin <= 2.1.1 - Cross Site Scripting (XSS) vulnerability

Contributor Cross Site Scripting XSS in StatCounter = 2.1.1 versions...

EUVD-2026-39745

Contributor Cross Site Scripting XSS in StatCounter = 2.1.1 versions...

CVE-2026-57629

CVE-2026-57629 : A cross-site scripting (XSS) vulnerability affects the WordPress plugin “StatCounter” in versions

CVE-2026-57617 WordPress SeedProd Pro plugin < 6.19.5 - Cross Site Scripting (XSS) vulnerability

Contributor Cross Site Scripting XSS in SeedProd Pro 6.19.5 versions...

EUVD-2026-39741

Contributor Cross Site Scripting XSS in Neve PRO = 3.1.2 versions...

EUVD-2026-39740

Contributor Cross Site Scripting XSS in SeedProd Pro 6.19.5 versions...

CVE-2026-57618 WordPress Neve PRO theme <= 3.1.2 - Cross Site Scripting (XSS) vulnerability

Contributor Cross Site Scripting XSS in Neve PRO = 3.1.2 versions...

CVE-2026-57617

SeedProd Pro WordPress plugin versions prior to 6.19.5 are affected by a Cross Site Scripting (XSS) vulnerability. The CVE notes an XSS in SeedProd Pro