CVE-2026-66687: Improper Neutralization of Input During Web Page Generation

Customer Cross Site Scripting XSS in WpBookingly = 1.3.2 versions...

CVE-2026-66471: Improper Neutralization of Input During Web Page Generation

Subscriber Cross Site Scripting XSS in Accordion = 3.0.6 versions...

CVE-2026-66468: Improper Neutralization of Input During Web Page Generation

Unauthenticated Cross Site Scripting XSS in Local Delivery Drivers for WooCommerce = 3.0.0 versions...

CVE-2026-66467: Improper Neutralization of Input During Web Page Generation

Subscriber Cross Site Scripting XSS in FluentCommunity = 2.7.5 versions...

CVE-2026-66426: Improper Neutralization of Input During Web Page Generation

Unauthenticated Cross Site Scripting XSS in WP-Stats = 2.56 versions...

CVE-2026-61974: Improper Neutralization of Input During Web Page Generation

Unauthenticated Cross Site Scripting XSS in Mang Board WP = 2.3.4 versions...

CVE-2026-61960: Improper Neutralization of Input During Web Page Generation

Unauthenticated Cross Site Scripting XSS in WP Full Stripe Free = 8.5.0 versions...

CVE-2026-28170: Improper Neutralization of Input During Web Page Generation

Unauthenticated Cross Site Scripting XSS in Blog Floating Button = 1.4.20 versions...

CVE-2026-28158: Improper Neutralization of Input During Web Page Generation

Unauthenticated Cross Site Scripting XSS in Do Lasso = 358 versions...

CVE-2026-27539: Improper Neutralization of Input During Web Page Generation

Unauthenticated Cross Site Scripting XSS in Welcart e-Commerce = 2.11.31 versions...

PT-2026-71521

Name of the Vulnerable Software and Affected Versions Blog Floating Button versions prior to 1.4.21 Description Stored Cross-Site Scripting occurs due to insufficient input sanitization and output escaping. This allows unauthenticated attackers to inject arbitrary web scripts into pages, which...

PT-2026-76434

These are all security issues fixed in the pgadmin4-9.17-1.1 package on the GA media of openSUSE Tumbleweed...

PT-2026-71604

Donor Cross Site Scripting XSS in GiveWP 4.16.6 versions...

PT-2026-71563

Subscriber Cross Site Scripting XSS in Profile Extra Fields by BestWebSoft = 1.3.4 versions...

PT-2026-71591

Unauthenticated Cross Site Scripting XSS in Colissimo Officiel : Méthodes de livraison pour WooCommerce = 2.10.0 versions...

PT-2026-71593

Unauthenticated Cross Site Scripting XSS in Smart Online Order for Clover = 1.6.1 versions...

PT-2026-71684

Cross-site Scripting in the Markdown renderer in maalfer Pentestify before 2.3.2 allows authenticated users to execute arbitrary JavaScript in the application origin via a Markdown link whose URL contains a double quote, which closes the anchor's href attribute because the renderer's sanitization...

CVE-2026-28004: Improper Neutralization of Input During Web Page Generation

Unauthenticated Cross Site Scripting XSS in Business Directory = 6.4.25 versions...

PT-2026-71592

Unauthenticated Cross Site Scripting XSS in SureDash = 1.10.1 versions...

PT-2026-71600

Author Cross Site Scripting XSS in WP Data Access = 5.5.79 versions...