1136541 matches found
CVE-2026-105261
The Schedule Post Changes With PublishPress Future: Unpublish, Delete, Change Status, Trash, Change Categories WordPress plugin before 4.10.6 does not enforce a safe HTML-element allowlist on a shortcode attribute and does not neutralise attacker-controlled text placed inside the resulting elemen...
WordPress Houzez theme <= 4.4.0 - Cross Site Scripting (XSS) vulnerability
Cross Site Scripting XSS vulnerability discovered by Rafie Muhammad in WordPress Theme Houzez versions = 4.4.0...
CVE-2026-92409 Donation Thermometer 2.2.9 - 2.2.11 - Contributor+ Stored XSS via Shortcode
The Donation Thermometer WordPress plugin before 2.3.0 does not escape a colour value taken from a shortcode attribute before using it in an attribute of the generated legend markup, allowing users with the Contributor role and above to inject arbitrary event handlers that execute when the page i...
CVE-2026-92409
The Donation Thermometer WordPress plugin before version 2.3.0 is vulnerable to a Stored Cross-Site Scripting (XSS) flaw. The root cause is the failure to escape a colour value retrieved from a shortcode attribute before it is used within an attribute of the generated legend markup . This allows ...
EUVD-2026-100863
The Donation Thermometer WordPress plugin before 2.3.0 does not escape a colour value taken from a shortcode attribute before using it in an attribute of the generated legend markup, allowing users with the Contributor role and above to inject arbitrary event handlers that execute when the page i...
WordPress Donation Thermometer plugin < 2.3.0 - Contributor+ Stored XSS vulnerability
Contributor+ Stored XSS vulnerability discovered by Philipp Doblhofer in WordPress Plugin Donation Thermometer versions 2.3.0...
CVE-2026-92409 Donation Thermometer 2.2.9 - 2.2.11 - Contributor+ Stored XSS via Shortcode
The Donation Thermometer WordPress plugin before 2.3.0 does not escape a colour value taken from a shortcode attribute before using it in an attribute of the generated legend markup, allowing users with the Contributor role and above to inject arbitrary event handlers that execute when the page i...
CVE-2026-86799
The Forms WordPress plugin (versions before 3.0.2 ) is vulnerable to unauthenticated stored XSS . The root cause is a failure to sanitise submitted form values on storage and a failure to escape those values before they are outputted on the form submissions screen within the administration dashbo...
EUVD-2026-100855
The Forms WordPress plugin before 3.0.2 does not sanitise submitted form values on storage, nor escape them before outputting them on the form submissions screen in the administration dashboard, allowing unauthenticated users to inject arbitrary web scripts that will execute in the browser of any...
CVE-2026-86799 Forms < 3.0.2 - Unauthenticated Stored XSS via Form Submission
The Forms WordPress plugin before 3.0.2 does not sanitise submitted form values on storage, nor escape them before outputting them on the form submissions screen in the administration dashboard, allowing unauthenticated users to inject arbitrary web scripts that will execute in the browser of any...
WordPress Pricing Table plugin 1.0.7-2.1.4 - Contributor+ Stored XSS vulnerability
Contributor+ Stored XSS vulnerability discovered by Philipp Doblhofer in WordPress Plugin Pricing Table block – Display product prices as a table. versions 1.0.7-2.1.4...
EUVD-2026-100854
The Pricing Table WordPress plugin before 2.1.5 does not validate the scheme of a user-supplied link value in one of its blocks before rendering it, allowing users with contributor-level access and above to store malicious scripts that execute when another user views and interacts with the affect...
CVE-2026-86797 Pricing Table Block 1.0.7 - 2.1.4 - Contributor+ Stored XSS via Pricing Link
The Pricing Table WordPress plugin before 2.1.5 does not validate the scheme of a user-supplied link value in one of its blocks before rendering it, allowing users with contributor-level access and above to store malicious scripts that execute when another user views and interacts with the affect...
CVE-2026-86797
The Pricing Table WordPress plugin, in versions 1.0.7 through 2.1.4 , is vulnerable to Stored Cross-Site Scripting (XSS) . The root cause is a failure to validate the scheme of a user-supplied link value within one of its blocks before rendering. This allows users with contributor-level access or...
CVE-2026-86799 Forms < 3.0.2 - Unauthenticated Stored XSS via Form Submission
The Forms WordPress plugin before 3.0.2 does not sanitise submitted form values on storage, nor escape them before outputting them on the form submissions screen in the administration dashboard, allowing unauthenticated users to inject arbitrary web scripts that will execute in the browser of any...
CVE-2026-107178 Image Photo Gallery Final Tiles Grid < 3.6.16 - Contributor+ Stored XSS via 'lightboxOptions' Parameter
The Image Photo Gallery Final Tiles Grid WordPress plugin before 3.6.16 does not escape gallery lightbox configuration values before printing them into an inline script on every page that embeds the gallery, allowing users with contributor-level access and above to store JavaScript that executes ...
CVE-2026-107178
The Image Photo Gallery Final Tiles Grid WordPress plugin versions prior to 3.6.16 is vulnerable to a Stored Cross-Site Scripting (XSS) flaw. The root cause is the failure to escape gallery lightbox configuration values (specifically via the 'lightboxOptions' parameter) before they are printed in...
EUVD-2026-100889
The Image Photo Gallery Final Tiles Grid WordPress plugin before 3.6.16 does not escape gallery lightbox configuration values before printing them into an inline script on every page that embeds the gallery, allowing users with contributor-level access and above to store JavaScript that executes ...
WordPress Image Photo Gallery Final Tiles Grid plugin < 3.6.16 - Contributor+ Stored XSS vulnerability
Contributor+ Stored XSS vulnerability discovered by Ala Bouali in WordPress Plugin Image Photo Gallery Final Tiles Grid versions 3.6.16...
CVE-2026-107178 Image Photo Gallery Final Tiles Grid < 3.6.16 - Contributor+ Stored XSS via 'lightboxOptions' Parameter
The Image Photo Gallery Final Tiles Grid WordPress plugin before 3.6.16 does not escape gallery lightbox configuration values before printing them into an inline script on every page that embeds the gallery, allowing users with contributor-level access and above to store JavaScript that executes ...