1122277 matches found
EUVD-2026-48184
Unauthenticated Cross Site Scripting XSS in AffiliateWP = 2.34.0 versions...
CVE-2026-57809
The CVE-2026-57809 entry describes an Unauthenticated Reflected Cross-Site Scripting (XSS) vulnerability in the WordPress AffiliateWP plugin up to version 2.34.0 . Affected component is the plugin’s input handling leading to reflected XSS; the issue is exploitable without authentication. Official...
EUVD-2026-48180
Unauthenticated Cross Site Scripting XSS in Grand Photography = 5.7.8 versions...
CVE-2026-57769
CVE-2026-57769 describes an unauthenticated Cross Site Scripting (XSS) flaw in the WordPress Grand Photography theme up to version 5.7.8. Multiple sources (CVE lists, NVD, CVERecord, Patchstack) indicate a reflected XSS variant affecting that theme, enabling an attacker to inject scripts that exe...
EUVD-2026-48179
Unauthenticated Cross Site Scripting XSS in WP Google Maps Pro = 10.1.02 versions...
CVE-2026-57767
WP Google Maps Pro plugin <= 10.1.02 has an unauthenticated Cross Site Scripting (XSS) vulnerability. Affects versions
CVE-2026-57735
CVE-2026-57735 concerns the WordPress Breakdance plugin, affected in versions ≤ 2.7.1, with unauthenticated Cross Site Scripting (XSS). The description and connected records confirm an XSS vulnerability exploitable without authentication, impacting Breakdance functionality through the specified v...
EUVD-2026-48178
Unauthenticated Cross Site Scripting XSS in Breakdance = 2.7.1 versions...
CVE-2026-57704
CVE-2026-57704 : Unauthenticated Cross Site Scripting (XSS) in the WordPress Smart Manager plugin for WP e‑commerce, versions ≤ 8.90.0. Root cause and specific exploit path are not detailed in the provided documents. CVSSv3.1 base score 7.1 (HIGH) with network attack vector and user interaction r...
EUVD-2026-48175
Unauthenticated Cross Site Scripting XSS in Smart Manager = 8.90.0 versions...
CVE-2026-57699
The CVE-2026-57699 entry concerns the WordPress Slider Pro plugin (versions ≤ 4.8.13) with a Cross Site Scripting (XSS) vulnerability affecting subscribers. The Patchstack-backed details identify the affected component and vulnerability type, with a CVSS 3.1 vector of AV:N/AC:L/PR:N/UI:R/S:C/C:L/...
CVE-2026-57701
The CVE affects WordPress plugin Real Estate Manager Pro, versions
EUVD-2026-48173
Unauthenticated Cross Site Scripting XSS in Real Estate Manager Pro = 12.8.5 versions...
EUVD-2026-48172
Subscriber Cross Site Scripting XSS in Slider Pro = 4.8.13 versions...
CVE-2026-57427
CVE-2026-57427 documents an unauthenticated Cross-Site Scripting (XSS) vulnerability affecting the WordPress Download Monitor — WPForms Lock plugin, version
EUVD-2026-48170
Unauthenticated Cross Site Scripting XSS in Sprout Clients = 3.2.3 versions...
EUVD-2026-48169
Unauthenticated Cross Site Scripting XSS in Download Monitor - WPForms Lock = 1.0.4 versions...
CVE-2026-57428
CVE-2026-57428 affects WordPress Sprout Clients plugin versions ≤ 3.2.3. The issue is an unauthenticated Cross Site Scripting (XSS) vulnerability in Sprout Clients, with a CVSSv3.1 base score of 7.1 (HIGH). Exploitation is network-based but requires user interaction (UI: Required) and privileges ...