1131423 matches found
CVE-2026-89269
The WP Testimonials WordPress plugin, in versions through 1.4.13 , is vulnerable to Stored Cross-Site Scripting (XSS) . The root cause is the failure to properly escape testimonial content, which effectively reverses WordPress's standard HTML sanitization during rendering. This allows users with ...
CVE-2026-89269 WP Testimonials <= 1.4.13 - Author+ Stored XSS via wp-testimonials Shortcode
The WP Testimonials WordPress plugin through 1.4.13 does not properly escape testimonial content and reverses WordPress's HTML sanitization when rendering it, allowing users with the Author role and above to store JavaScript that executes in the session of any user viewing the testimonials,...
CVE-2026-54867 WordPress Responsive Slider plugin <= 0.1.9 - Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Griden Responsive Slider responsive-slider allows Stored XSS.This issue affects Responsive Slider: from n/a through 0.1.9...
EUVD-2026-98298
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Griden Responsive Slider responsive-slider allows Stored XSS.This issue affects Responsive Slider: from n/a through 0.1.9...
CVE-2026-54867
The Griden Responsive Slider WordPress plugin (versions 0.1.9 and below ) is vulnerable to Stored Cross-Site Scripting (XSS) . This is caused by the Improper Neutralization of Input During Web Page Generation , allowing an attacker to inject malicious scripts. Exploitation details are not provide...
WordPress Responsive Slider plugin <= 0.1.9 - Cross Site Scripting (XSS) vulnerability
Cross Site Scripting XSS vulnerability discovered by Ananda Dhakal Patchstack in WordPress Plugin Responsive Slider versions = 0.1.9...
CVE-2026-54868
The FolioVision FV Simpler SEO plugin (fv-all-in-one-seo-pack) for WordPress is vulnerable to Stored Cross-Site Scripting (XSS) . This issue, identified as CWE-79 , stems from the improper neutralization of input during web page generation . The vulnerability impacts versions from n/a through 1.9...
CVE-2026-54868 WordPress FV Simpler SEO plugin <= 1.9.7 - Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in FolioVision FV Simpler SEO fv-all-in-one-seo-pack allows Stored XSS.This issue affects FV Simpler SEO: from n/a through 1.9.7...
EUVD-2026-98297
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in FolioVision FV Simpler SEO fv-all-in-one-seo-pack allows Stored XSS.This issue affects FV Simpler SEO: from n/a through 1.9.7...
WordPress FV Simpler SEO plugin <= 1.9.7 - Cross Site Scripting (XSS) vulnerability
Cross Site Scripting XSS vulnerability discovered by Ananda Dhakal Patchstack in WordPress Plugin FV Simpler SEO versions = 1.9.7...
CVE-2026-54869
The Impress for IDX Broker WordPress plugin (specifically the idx-broker-platinum component) is vulnerable to a Stored Cross-Site Scripting (XSS) vulnerability. This issue is caused by the improper neutralization of input during web page generation . The vulnerability impacts versions from n/a th...
EUVD-2026-98296
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in IDX Broker IMPress for IDX Broker idx-broker-platinum allows Stored XSS.This issue affects IMPress for IDX Broker: from n/a through 3.3.1...
CVE-2026-54869 WordPress IMPress for IDX Broker plugin <= 3.3.1 - Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in IDX Broker IMPress for IDX Broker idx-broker-platinum allows Stored XSS.This issue affects IMPress for IDX Broker: from n/a through 3.3.1...
WordPress IMPress for IDX Broker plugin <= 3.3.1 - Cross Site Scripting (XSS) vulnerability
Cross Site Scripting XSS vulnerability discovered by Ananda Dhakal Patchstack in WordPress Plugin IMPress for IDX Broker versions = 3.3.1...
CVE-2026-54870 WordPress Weaver Xtreme theme Support plugin <= 7.0.1 - Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in wpweaver Weaver Xtreme Theme Support weaverx-theme-support allows Stored XSS.This issue affects Weaver Xtreme Theme Support: from n/a through 7.0.1...
EUVD-2026-98295
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in wpweaver Weaver Xtreme Theme Support weaverx-theme-support allows Stored XSS.This issue affects Weaver Xtreme Theme Support: from n/a through 7.0.1...
CVE-2026-54870
The Weaver Xtreme Theme Support plugin (weaverx-theme-support) for WordPress is vulnerable to Stored Cross-Site Scripting (XSS) in versions n/a through 7.0.1 . The root cause is the improper neutralization of input during web page generation . This vulnerability allows an attacker to execute mali...
WordPress Weaver Xtreme theme Support plugin <= 7.0.1 - Cross Site Scripting (XSS) vulnerability
Cross Site Scripting XSS vulnerability discovered by Ananda Dhakal Patchstack in WordPress Plugin Weaver Xtreme Theme Support versions = 7.1...
DWrwq
Descrip PHPGurukul Online Shopping Portal 2.1 is vulnerable to Cross Site Scripting XSS in /admin/updateorder.php. Vulnerability Overview 1.Vulnerability Type: Stored Cross-Site Scripting XSS 2.Affected Product: Online Shopping Portal Project - 2.1 3.Affected Component:...