|
CVE-2026-66705
|
|
Unauthenticated Cross Site Scripting (XSS) in Facebook for WordPress <= 5.2.1 versions.
Unauthenticated Cross Site Scripting (XSS) in Facebook for WordPress <= 5.2.1 versions.
|
High
|
WordPress
Cross-Site Scripting
Cwe 79
|
il y a 3 semaines
|
|
CVE-2026-66702
|
|
Unauthenticated Cross Site Scripting (XSS) in Rank Math SEO <= 1.0.274.1 versions.
Unauthenticated Cross Site Scripting (XSS) in Rank Math SEO <= 1.0.274.1 versions.
|
High
|
Cross-Site Scripting
Cwe 79
|
il y a 3 semaines
|
|
CVE-2026-66703
|
|
Contributor Cross Site Scripting (XSS) in MailOptin <= 1.2.78.0 versions.
Contributor Cross Site Scripting (XSS) in MailOptin <= 1.2.78.0 versions.
|
Medium
|
Cross-Site Scripting
Cwe 79
|
il y a 3 semaines
|
|
CVE-2026-66707
|
|
Unauthenticated Cross Site Scripting (XSS) in Facebook for WooCommerce <= 3.7.5 versions.
Unauthenticated Cross Site Scripting (XSS) in Facebook for WooCommerce <= 3.7.5 versions.
|
High
|
Cross-Site Scripting
Cwe 79
|
il y a 3 semaines
|
|
CVE-2026-66706
|
|
Author Cross Site Scripting (XSS) in Subscribe to Comments <= 2.3.1 versions.
Author Cross Site Scripting (XSS) in Subscribe to Comments <= 2.3.1 versions.
|
Medium
|
Cross-Site Scripting
Cwe 79
|
il y a 3 semaines
|
|
CVE-2026-66688
|
|
Contributor Cross Site Scripting (XSS) in Ultimate Addons for Elementor <= 1.45.2 versions.
Contributor Cross Site Scripting (XSS) in Ultimate Addons for Elementor <= 1.45.2 versions.
|
Medium
|
Cross-Site Scripting
Cwe 79
|
il y a 3 semaines
|
|
CVE-2026-66690
|
|
Unauthenticated Cross Site Scripting (XSS) in GiveWP <= 4.16.5 versions.
Unauthenticated Cross Site Scripting (XSS) in GiveWP <= 4.16.5 versions.
|
High
|
Cross-Site Scripting
Cwe 79
|
il y a 3 semaines
|
|
CVE-2026-66694
|
|
Unauthenticated Cross Site Scripting (XSS) in Thrive Architect <= 10.9.3.1 versions.
Unauthenticated Cross Site Scripting (XSS) in Thrive Architect <= 10.9.3.1 versions.
|
High
|
Cross-Site Scripting
Cwe 79
|
il y a 3 semaines
|
|
CVE-2026-66664
|
|
Unauthenticated Cross Site Scripting (XSS) in SEO Plugin by Squirrly SEO <= 14.2.0 versions.
Unauthenticated Cross Site Scripting (XSS) in SEO Plugin by Squirrly SEO <= 14.2.0 versions.
|
High
|
Cross-Site Scripting
Cwe 79
|
il y a 3 semaines
|
|
CVE-2026-66663
|
|
Unauthenticated Cross Site Scripting (XSS) in WP Data Access <= 5.5.79 versions.
Unauthenticated Cross Site Scripting (XSS) in WP Data Access <= 5.5.79 versions.
|
High
|
Cross-Site Scripting
Cwe 79
|
il y a 3 semaines
|
|
CVE-2026-66440
|
|
Unauthenticated Cross Site Scripting (XSS) in WPIDE – File Manager & Code Editor <= 3.5.7 versions.
Unauthenticated Cross Site Scripting (XSS) in WPIDE – File Manager & Code Editor <= 3.5.7 versions.
|
High
|
Cross-Site Scripting
Cwe 79
|
il y a 3 semaines
|
|
CVE-2026-66457
|
|
Unauthenticated Cross Site Scripting (XSS) in Events Manager <= 7.4.1 versions.
Unauthenticated Cross Site Scripting (XSS) in Events Manager <= 7.4.1 versions.
|
High
|
Cross-Site Scripting
Cwe 79
|
il y a 3 semaines
|
|
CVE-2026-66439
|
|
Unauthenticated Cross Site Scripting (XSS) in Advanced AJAX Product Filters <= 3.2.0.3 versions.
Unauthenticated Cross Site Scripting (XSS) in Advanced AJAX Product Filters <= 3.2.0.3 versions.
|
High
|
Cross-Site Scripting
Cwe 79
|
il y a 3 semaines
|
|
CVE-2026-65560
|
|
Unauthenticated Cross Site Scripting (XSS) in Houzez Property Feed <= 2.5.48 versions.
Unauthenticated Cross Site Scripting (XSS) in Houzez Property Feed <= 2.5.48 versions.
|
High
|
Cross-Site Scripting
Cwe 79
|
il y a 3 semaines
|
|
CVE-2026-65565
|
|
Unauthenticated Cross Site Scripting (XSS) in Survey Maker <= 5.2.3.3 versions.
Unauthenticated Cross Site Scripting (XSS) in Survey Maker <= 5.2.3.3 versions.
|
High
|
Cross-Site Scripting
Cwe 79
|
il y a 3 semaines
|
|
CVE-2026-65544
|
|
Unauthenticated Cross Site Scripting (XSS) in Super Socializer <= 7.14.5 versions.
Unauthenticated Cross Site Scripting (XSS) in Super Socializer <= 7.14.5 versions.
|
High
|
Cross-Site Scripting
Cwe 79
|
il y a 3 semaines
|
|
CVE-2026-65545
|
|
Unauthenticated Cross Site Scripting (XSS) in AI Engine <= 3.6.8 versions.
Unauthenticated Cross Site Scripting (XSS) in AI Engine <= 3.6.8 versions.
|
High
|
Cross-Site Scripting
Cwe 79
|
il y a 3 semaines
|
|
CVE-2026-65513
|
|
Unauthenticated Cross Site Scripting (XSS) in Simply Schedule Appointments <= 1.6.12.10 versions.
Unauthenticated Cross Site Scripting (XSS) in Simply Schedule Appointments <= 1.6.12.10 versions.
|
High
|
Cross-Site Scripting
Cwe 79
|
il y a 3 semaines
|
|
CVE-2026-65509
|
|
Unauthenticated Cross Site Scripting (XSS) in wpDataTables <= 7.5.1 versions.
Unauthenticated Cross Site Scripting (XSS) in wpDataTables <= 7.5.1 versions.
|
High
|
Cross-Site Scripting
Cwe 79
|
il y a 3 semaines
|
|
CVE-2026-65517
|
|
Unauthenticated Cross Site Scripting (XSS) in Easy PayPal Buy Now Button <= 2.0.4 versions.
Unauthenticated Cross Site Scripting (XSS) in Easy PayPal Buy Now Button <= 2.0.4 versions.
|
High
|
Cross-Site Scripting
Cwe 79
|
il y a 3 semaines
|
|
CVE-2026-65515
|
|
Unauthenticated Cross Site Scripting (XSS) in AffiliateWP <= 2.35.0 versions.
Unauthenticated Cross Site Scripting (XSS) in AffiliateWP <= 2.35.0 versions.
|
High
|
Cross-Site Scripting
Cwe 79
|
il y a 3 semaines
|
|
CVE-2026-61964
|
|
Unauthenticated Cross Site Scripting (XSS) in Ninja Tables <= 5.2.9 versions.
Unauthenticated Cross Site Scripting (XSS) in Ninja Tables <= 5.2.9 versions.
|
High
|
Cross-Site Scripting
Cwe 79
|
il y a 3 semaines
|
|
CVE-2026-61982
|
|
Unauthenticated Cross Site Scripting (XSS) in SiteGuard WP Plugin <= 1.8.6 versions.
Unauthenticated Cross Site Scripting (XSS) in SiteGuard WP Plugin <= 1.8.6 versions.
|
High
|
Cross-Site Scripting
Cwe 79
|
il y a 3 semaines
|
|
CVE-2026-61963
|
|
Unauthenticated Cross Site Scripting (XSS) in Media LIbrary Assistant <= 3.38 versions.
Unauthenticated Cross Site Scripting (XSS) in Media LIbrary Assistant <= 3.38 versions.
|
High
|
Cross-Site Scripting
Cwe 79
|
il y a 3 semaines
|
|
CVE-2026-61961
|
|
Unauthenticated Cross Site Scripting (XSS) in EmbedPress <= 4.5.6 versions.
Unauthenticated Cross Site Scripting (XSS) in EmbedPress <= 4.5.6 versions.
|
High
|
Cross-Site Scripting
Cwe 79
|
il y a 3 semaines
|
|
CVE-2026-61959
|
|
Subscriber Cross Site Scripting (XSS) in Business Directory <= 6.4.24 versions.
Subscriber Cross Site Scripting (XSS) in Business Directory <= 6.4.24 versions.
|
Medium
|
Cross-Site Scripting
Cwe 79
|
il y a 3 semaines
|
|
CVE-2026-28178
|
|
Contributor Cross Site Scripting (XSS) in Powerkit <= 3.1.0 versions.
Contributor Cross Site Scripting (XSS) in Powerkit <= 3.1.0 versions.
|
Medium
|
Cross-Site Scripting
Cwe 79
|
il y a 3 semaines
|
|
CVE-2026-28179
|
|
Shop manager Cross Site Scripting (XSS) in FiboSearch <= 1.33.0 versions.
Shop manager Cross Site Scripting (XSS) in FiboSearch <= 1.33.0 versions.
|
Medium
|
Cross-Site Scripting
Cwe 79
|
il y a 3 semaines
|
|
CVE-2026-28177
|
|
Unauthenticated Cross Site Scripting (XSS) in Popup Maker <= 1.23.0 versions.
Unauthenticated Cross Site Scripting (XSS) in Popup Maker <= 1.23.0 versions.
|
High
|
Cross-Site Scripting
Cwe 79
|
il y a 3 semaines
|
|
CVE-2026-28143
|
|
Unauthenticated Cross Site Scripting (XSS) in Forminator <= 1.56.0 versions.
Unauthenticated Cross Site Scripting (XSS) in Forminator <= 1.56.0 versions.
|
High
|
Cross-Site Scripting
Cwe 79
|
il y a 3 semaines
|
|
CVE-2026-28141
|
|
Unauthenticated Cross Site Scripting (XSS) in NextGEN Gallery <= 4.2.3 versions.
Unauthenticated Cross Site Scripting (XSS) in NextGEN Gallery <= 4.2.3 versions.
|
High
|
Cross-Site Scripting
Cwe 79
|
il y a 3 semaines
|
|
CVE-2026-28082
|
|
Unauthenticated Cross Site Scripting (XSS) in JetEngine <= 3.8.13.1 versions.
Unauthenticated Cross Site Scripting (XSS) in JetEngine <= 3.8.13.1 versions.
|
High
|
Cross-Site Scripting
Cwe 79
|
il y a 3 semaines
|
|
CVE-2026-18501
|
|
XSS (Cross-Site Scripting) dans wordpress (CVE-2026-18501)
XSS dans wordpress (CVE-2026-18501). Risque d'opérations non autorisées ou de divulgation.
|
Medium
|
WordPress
Cross-Site Scripting
Cwe 79
|
il y a 3 semaines
|
|
CVE-2026-8166
|
|
XSS (Cross-Site Scripting) dans CVE-2026-8166 (CVE-2026-8166)
XSS dans CVE-2026-8166 (CVE-2026-8166). Risque d'opérations non autorisées ou de divulgation.
|
Medium
|
Cross-Site Scripting
Cwe 79
|
il y a 3 semaines
|
|
CVE-2026-5391
|
|
XSS (Cross-Site Scripting) dans wordpress (CVE-2026-5391)
XSS dans wordpress (CVE-2026-5391). Risque d'opérations non autorisées ou de divulgation.
|
Medium
|
WordPress
Cross-Site Scripting
Cwe 79
|
il y a 3 semaines
|
|
CVE-2026-5158
|
|
XSS (Cross-Site Scripting) dans wordpress (CVE-2026-5158)
XSS dans wordpress (CVE-2026-5158). Risque d'opérations non autorisées ou de divulgation.
|
Medium
|
WordPress
Cross-Site Scripting
Cwe 79
|
il y a 3 semaines
|
|
CVE-2025-15028
|
|
XSS (Cross-Site Scripting) dans wordpress (CVE-2025-15028)
XSS dans wordpress (CVE-2025-15028). Risque d'opérations non autorisées ou de divulgation.
|
High
|
WordPress
Cross-Site Scripting
Cwe 79
|
il y a 3 semaines
|
|
CVE-2026-18510
|
|
XSS (Cross-Site Scripting) dans wordpress (CVE-2026-18510)
XSS dans wordpress (CVE-2026-18510). Risque d'opérations non autorisées ou de divulgation.
|
High
|
WordPress
Cross-Site Scripting
Cwe 79
|
il y a 3 semaines
|
|
CVE-2026-18400
|
|
XSS (Cross-Site Scripting) dans wordpress (CVE-2026-18400)
XSS dans wordpress (CVE-2026-18400). Risque d'opérations non autorisées ou de divulgation.
|
Medium
|
WordPress
Cross-Site Scripting
Cwe 79
|
il y a 3 semaines
|
|
CVE-2026-16537
|
|
XSS (Cross-Site Scripting) dans wordpress (CVE-2026-16537)
XSS dans wordpress (CVE-2026-16537). Risque d'opérations non autorisées ou de divulgation.
|
Medium
|
WordPress
Cross-Site Scripting
Cwe 79
|
il y a 3 semaines
|
|
CVE-2026-18395
|
|
XSS (Cross-Site Scripting) dans wordpress (CVE-2026-18395)
XSS dans wordpress (CVE-2026-18395). Risque d'opérations non autorisées ou de divulgation.
|
Medium
|
WordPress
Cross-Site Scripting
Cwe 79
|
il y a 3 semaines
|
|
CVE-2026-11588
|
|
XSS (Cross-Site Scripting) dans wordpress (CVE-2026-11588)
XSS dans wordpress (CVE-2026-11588). Risque d'opérations non autorisées ou de divulgation.
|
Medium
|
WordPress
Cross-Site Scripting
Cwe 79
|
il y a 3 semaines
|
|
CVE-2025-15678
|
|
XSS (Cross-Site Scripting) dans wordpress (CVE-2025-15678)
XSS dans wordpress (CVE-2025-15678). Risque d'opérations non autorisées ou de divulgation.
|
Medium
|
JavaScript
WordPress
Cross-Site Scripting
Cwe 79
|
il y a 3 semaines
|
|
CVE-2026-18325
|
|
The Forminator Forms – Contact Form, Payment Form & Custom Form Builder plugin for WordPress is...
The Forminator Forms – Contact Form, Payment Form & Custom Form Builder plugin for WordPress is...
|
High
|
WordPress
Cross-Site Scripting
Cwe 79
PHP
|
il y a 3 semaines
|
|
CVE-2026-16636
|
|
The FluentSMTP – WP SMTP Plugin with Amazon SES, SendGrid, MailGun, Postmark, Google and Any SMTP...
The FluentSMTP – WP SMTP Plugin with Amazon SES, SendGrid, MailGun, Postmark, Google and Any SMTP...
|
High
|
WordPress
Cross-Site Scripting
Cwe 79
PHP
|
il y a 3 semaines
|
|
CVE-2026-18968
|
|
XSS (Cross-Site Scripting) dans CVE-2026-18968 (CVE-2026-18968)
XSS dans CVE-2026-18968 (CVE-2026-18968). Risque d'opérations non autorisées ou de divulgation.
|
Medium
|
PHP
Cross-Site Scripting
Cwe 79
Cwe 94
|
il y a 3 semaines
|
|
CVE-2026-70441
|
|
XSS (Cross-Site Scripting) dans CVE-2026-70441 (CVE-2026-70441)
XSS dans CVE-2026-70441 (CVE-2026-70441). Risque d'opérations non autorisées ou de divulgation.
|
Medium
|
JavaScript
Cross-Site Scripting
Cwe 79
|
il y a 3 semaines
|
|
CVE-2026-70440
|
|
XSS (Cross-Site Scripting) dans CVE-2026-70440 (CVE-2026-70440)
XSS dans CVE-2026-70440 (CVE-2026-70440). Risque d'opérations non autorisées ou de divulgation.
|
Medium
|
JavaScript
Cross-Site Scripting
Cwe 79
|
il y a 3 semaines
|
|
CVE-2026-20198
|
|
XSS (Cross-Site Scripting) dans cisco (CVE-2026-20198)
XSS dans cisco (CVE-2026-20198). Risque d'opérations non autorisées ou de divulgation.
|
Medium
|
Cisco
Network
Cross-Site Scripting
Cwe 79
|
il y a 3 semaines
|
|
CVE-2026-9195
|
|
Traversée de chemin dans CVE-2026-9195 (CVE-2026-9195)
traversée de chemin dans CVE-2026-9195 (CVE-2026-9195). Des informations confidentielles peuvent être exposées.
|
Critical
|
JavaScript
Cross-Site Scripting
Cwe 22
Cwe 79
|
il y a 3 semaines
|