CVE-2026-57397

Summary: CVE-2026-57397 describes an unauthenticated Cross Site Scripting (XSS) vulnerability in the WordPress Coaching theme, affected versions <= 3.9.2. Affected product/component: WordPress Coaching theme (WordPress plugin/theme). Root cause / vulnerability type: Cross Site Scripting (XSS);...

EUVD-2026-48167

Unauthenticated Cross Site Scripting XSS in Coaching = 3.9.2 versions...

EUVD-2026-48165

Unauthenticated Cross Site Scripting XSS in Funnel Kit Funnel Builder PRO = 3.15.0.7 versions...

CVE-2026-57374

CVE-2026-57374 is an unauthenticated Cross Site Scripting (XSS) vulnerability affecting the WordPress Funnel Kit Funnel Builder PRO plugin, versioned <= 3.15.0.7. The CVSS v3.1 base score is 7.1 (HIGH) with NETWORK attack vector, LOW impacts to confidentiality/integrity/availability, and user ...

EUVD-2026-48164

Customer Cross Site Scripting XSS in Funnel Kit Funnel Builder PRO = 3.15.0.4 versions...

EUVD-2026-48163

Unauthenticated Cross Site Scripting XSS in Visitor Traffic Real Time Statistics Pro = 11.9.1 versions...

CVE-2026-57370

Summary (CVE-2026-57370): Unauthenticated reflected Cross Site Scripting (XSS) in WordPress plugin Visitor Traffic Real Time Statistics Pro versions

CVE-2026-57373

CVE-2026-57373 affects WordPress Funnel Kit Funnel Builder PRO plugin, versions

CVE-2026-27403

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in NerdPress Hubbub Lite allows Stored XSS. This issue affects Hubbub Lite: from n/a through 1.36.3...

CVE-2026-27403

CVE-2026-27403 concerns the WordPress Hubbub Lite plugin, versions

EUVD-2026-48158

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in NerdPress Hubbub Lite allows Stored XSS. This issue affects Hubbub Lite: from n/a through 1.36.3...

CVE-2026-24628

CVE-2026-24628 affects the WordPress plugin Photo Gallery by Supsystic (versions

EUVD-2026-48145

Administrator Cross Site Scripting XSS in Photo Gallery by Supsystic = 1.16.3 versions...

CVE-2025-68081

CVE-2025-68081 : A cross-site scripting (XSS) vulnerability affects the WordPress plugin WP-Polls in versions

EUVD-2025-210505

Administrator Cross Site Scripting XSS in WP-Polls = 2.77.3 versions...

CVE-2026-15794

The Grid/List View for WooCommerce plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'position' Shortcode Attribute in all versions up to, and including, 3.0.9 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with...

CVE-2026-15404

The Lpagery plugin for WordPress is vulnerable to Stored Cross-Site Scripting via post titles in versions up to, and including, 2.5.7. This is due to insufficient input sanitization and output escaping in the lpageryaddfiltertexttemplatepost function, which is hooked to adminfooter and echoes the...

EUVD-2026-47906

The Header Footer Script Adder – Insert Code in Header, Body & Footer plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'asmcode' Snippet Meta in all versions up to, and including, 2.1 due to insufficient input sanitization and output escaping. This makes it possible for...

CVE-2026-15394 Header Footer Script Adder <= 2.1 - Authenticated (Author+) Stored Cross-Site Scripting via 'asm_code' Snippet Meta

The Header Footer Script Adder – Insert Code in Header, Body & Footer plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'asmcode' Snippet Meta in all versions up to, and including, 2.1 due to insufficient input sanitization and output escaping. This makes it possible for...

CVE-2026-65756 Joomla Extension - regularlabs.com - XSS vector in Keyboard Shortcuts extension

Joomla Extension - regularlabs.com - XSS vector in Keyboard Shortcuts extension - Shortcut configuration accepted arbitrary inline JavaScript...