Vulnerabilities
Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.
| ID | Title | |
|---|---|---|
| CVE-2026-73344 |
|
Author Cross Site Scripting (XSS) in WP Data Access <= 5.5.79 versions.
Author Cross Site Scripting (XSS) in WP Data Access <= 5.5.79 versions.
|
| CVE-2026-73340 |
|
Contributor Cross Site Scripting (XSS) in Featured Image from URL <= 5.3.3 versions.
Contributor Cross Site Scripting (XSS) in Featured Image from URL <= 5.3.3 versions.
|
| CVE-2026-66698 |
|
Unauthenticated Cross Site Scripting (XSS) in SureDash <= 1.10.1 versions.
Unauthenticated Cross Site Scripting (XSS) in SureDash <= 1.10.1 versions.
|
| CVE-2026-66697 |
|
Cross-Site Scripting (XSS) in CVE-2026-66697 (CVE-2026-66697)
cross-site scripting in CVE-2026-66697 (CVE-2026-66697). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-66700 |
|
Unauthenticated Cross Site Scripting (XSS) in Smart Online Order for Clover <= 1.6.1 versions.
Unauthenticated Cross Site Scripting (XSS) in Smart Online Order for Clover <= 1.6.1 versions.
|
| CVE-2026-66655 |
|
Cross-Site Scripting (XSS) in CVE-2026-66655 (CVE-2026-66655)
cross-site scripting in CVE-2026-66655 (CVE-2026-66655). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-66687 |
|
Customer Cross Site Scripting (XSS) in WpBookingly <= 1.3.2 versions.
Customer Cross Site Scripting (XSS) in WpBookingly <= 1.3.2 versions.
|
| CVE-2026-66471 |
|
Subscriber Cross Site Scripting (XSS) in Accordion <= 3.0.6 versions.
Subscriber Cross Site Scripting (XSS) in Accordion <= 3.0.6 versions.
|
| CVE-2026-66467 |
|
Subscriber Cross Site Scripting (XSS) in FluentCommunity <= 2.7.5 versions.
Subscriber Cross Site Scripting (XSS) in FluentCommunity <= 2.7.5 versions.
|
| CVE-2026-66468 |
|
Cross-Site Scripting (XSS) in CVE-2026-66468 (CVE-2026-66468)
cross-site scripting in CVE-2026-66468 (CVE-2026-66468). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-66460 |
|
Subscriber Cross Site Scripting (XSS) in AfterShip Tracking <= 1.18.1 versions.
Subscriber Cross Site Scripting (XSS) in AfterShip Tracking <= 1.18.1 versions.
|
| CVE-2026-66449 |
|
Unauthenticated Cross Site Scripting (XSS) in Geo Mashup <= 1.13.18 versions.
Unauthenticated Cross Site Scripting (XSS) in Geo Mashup <= 1.13.18 versions.
|
| CVE-2026-66456 |
|
Subscriber Cross Site Scripting (XSS) in Profile Extra Fields by BestWebSoft <= 1.3.4 versions.
Subscriber Cross Site Scripting (XSS) in Profile Extra Fields by BestWebSoft <= 1.3.4 versions.
|
| CVE-2026-66426 |
|
Unauthenticated Cross Site Scripting (XSS) in WP-Stats <= 2.56 versions.
Unauthenticated Cross Site Scripting (XSS) in WP-Stats <= 2.56 versions.
|
| CVE-2026-66429 |
|
Cross-Site Scripting (XSS) in CVE-2026-66429 (CVE-2026-66429)
cross-site scripting in CVE-2026-66429 (CVE-2026-66429). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-65580 |
|
Unauthenticated Cross Site Scripting (XSS) in Agrion <= 1.0.0 versions.
Unauthenticated Cross Site Scripting (XSS) in Agrion <= 1.0.0 versions.
|
| CVE-2026-61974 |
|
Unauthenticated Cross Site Scripting (XSS) in Mang Board WP <= 2.3.4 versions.
Unauthenticated Cross Site Scripting (XSS) in Mang Board WP <= 2.3.4 versions.
|
| CVE-2026-61960 |
|
Unauthenticated Cross Site Scripting (XSS) in WP Full Stripe Free <= 8.5.0 versions.
Unauthenticated Cross Site Scripting (XSS) in WP Full Stripe Free <= 8.5.0 versions.
|
| CVE-2026-61965 |
|
Unauthenticated Cross Site Scripting (XSS) in GeekyBot <= 1.2.6 versions.
Unauthenticated Cross Site Scripting (XSS) in GeekyBot <= 1.2.6 versions.
|
| CVE-2026-28187 |
|
Cross-Site Scripting (XSS) in CVE-2026-28187 (CVE-2026-28187)
cross-site scripting in CVE-2026-28187 (CVE-2026-28187). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-28170 |
|
Unauthenticated Cross Site Scripting (XSS) in Blog Floating Button <= 1.4.20 versions.
Unauthenticated Cross Site Scripting (XSS) in Blog Floating Button <= 1.4.20 versions.
|
| CVE-2026-28175 |
|
Cross-Site Scripting (XSS) in CVE-2026-28175 (CVE-2026-28175)
cross-site scripting in CVE-2026-28175 (CVE-2026-28175). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-28182 |
|
Subscriber Cross Site Scripting (XSS) in AcyMailing SMTP Newsletter <= 10.11.1 versions.
Subscriber Cross Site Scripting (XSS) in AcyMailing SMTP Newsletter <= 10.11.1 versions.
|
| CVE-2026-28158 |
|
Unauthenticated Cross Site Scripting (XSS) in Do Lasso <= 358 versions.
Unauthenticated Cross Site Scripting (XSS) in Do Lasso <= 358 versions.
|
| CVE-2026-28004 |
|
Unauthenticated Cross Site Scripting (XSS) in Business Directory <= 6.4.25 versions.
Unauthenticated Cross Site Scripting (XSS) in Business Directory <= 6.4.25 versions.
|
| CVE-2026-28003 |
|
Unauthenticated Cross Site Scripting (XSS) in Maspik – Spam blacklist <= 2.9.1 versions.
Unauthenticated Cross Site Scripting (XSS) in Maspik – Spam blacklist <= 2.9.1 versions.
|
| CVE-2026-27536 |
|
Unauthenticated Cross Site Scripting (XSS) in MailChimp Subscribe Forms <= 4.3.3 versions.
Unauthenticated Cross Site Scripting (XSS) in MailChimp Subscribe Forms <= 4.3.3 versions.
|
| CVE-2026-27537 |
|
Unauthenticated Cross Site Scripting (XSS) in Popup by Supsystic <= 1.11.2 versions.
Unauthenticated Cross Site Scripting (XSS) in Popup by Supsystic <= 1.11.2 versions.
|
| CVE-2026-27539 |
|
Unauthenticated Cross Site Scripting (XSS) in Welcart e-Commerce <= 2.11.31 versions.
Unauthenticated Cross Site Scripting (XSS) in Welcart e-Commerce <= 2.11.31 versions.
|
| CVE-2026-19716 |
|
Cross-Site Scripting (XSS) in CVE-2026-19716 (CVE-2026-19716)
cross-site scripting in CVE-2026-19716 (CVE-2026-19716). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-73628 |
|
Cross-Site Scripting (XSS) in CVE-2026-73628 (CVE-2026-73628)
cross-site scripting in CVE-2026-73628 (CVE-2026-73628). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `2.6.1` or later.
|
| CVE-2026-3639 |
|
Cross-Site Scripting (XSS) in wordpress (CVE-2026-3639)
cross-site scripting in wordpress (CVE-2026-3639). Risk of unauthorized operations or information disclosure. Exploitable via ``ppwp``.
|
| CVE-2026-18146 |
|
The Fluent Forms – Customizable Contact Forms, Survey, Quiz, & Conversational Form Builder plugin...
The Fluent Forms – Customizable Contact Forms, Survey, Quiz, & Conversational Form Builder plugin...
|
| CVE-2026-73329 |
|
Cross-Site Scripting (XSS) in CVE-2026-73329 (CVE-2026-73329)
cross-site scripting in CVE-2026-73329 (CVE-2026-73329). Confidential information can be exposed externally.
|
| CVE-2026-73332 |
|
SQL Injection in c (CVE-2026-73332)
SQL injection in c (CVE-2026-73332). Confidential information can be exposed externally.
|
| CVE-2026-73326 |
|
Vulnerability in CVE-2026-73326 (CVE-2026-73326)
vulnerability in CVE-2026-73326 (CVE-2026-73326). Data can be tampered with by attackers.
|
| CVE-2026-72787 |
|
Cross-Site Scripting (XSS) in CVE-2026-72787 (CVE-2026-72787)
cross-site scripting in CVE-2026-72787 (CVE-2026-72787). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-49466 |
|
Cross-Site Scripting (XSS) in wordpress (CVE-2026-49466)
cross-site scripting in wordpress (CVE-2026-49466). Risk of unauthorized operations or information disclosure. Exploitable via ``template``.
|
| CVE-2026-15217 |
|
Cross-Site Scripting (XSS) in gitlab (CVE-2026-15217)
cross-site scripting in gitlab (CVE-2026-15217). Confidential information can be exposed externally.
|
| CVE-2026-15216 |
|
Cross-Site Scripting (XSS) in gitlab (CVE-2026-15216)
cross-site scripting in gitlab (CVE-2026-15216). Confidential information can be exposed externally.
|
| CVE-2026-48552 |
|
Cross-Site Scripting (XSS) in CVE-2026-48552 (CVE-2026-48552)
cross-site scripting in CVE-2026-48552 (CVE-2026-48552). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-73237 |
|
Vulnerability in apache (CVE-2026-73237)
vulnerability in apache (CVE-2026-73237). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-73238 |
|
Vulnerability in apache (CVE-2026-73238)
vulnerability in apache (CVE-2026-73238). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-48550 |
|
Cross-Site Scripting (XSS) in CVE-2026-48550 (CVE-2026-48550)
cross-site scripting in CVE-2026-48550 (CVE-2026-48550). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-16694 |
|
Cross-Site Scripting (XSS) in ibm (CVE-2026-16694)
cross-site scripting in ibm (CVE-2026-16694). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-73295 |
|
Cross-Site Scripting (XSS) in CVE-2026-73295 (CVE-2026-73295)
cross-site scripting in CVE-2026-73295 (CVE-2026-73295). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-73374 |
|
Cross-Site Scripting (XSS) in CVE-2026-73374 (CVE-2026-73374)
cross-site scripting in CVE-2026-73374 (CVE-2026-73374). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-45694 |
|
Cross-Site Scripting (XSS) in librenms/librenms (CVE-2026-45694)
cross-site scripting in librenms/librenms (CVE-2026-45694). Risk of unauthorized operations or information disclosure. Exploitable via ``document.title``. Mitigation: upgrade to `26.5.0` or later.
|
| CVE-2026-32258 |
|
Cross-Site Scripting (XSS) in winter/wn-backend-module (CVE-2026-32258)
cross-site scripting in winter/wn-backend-module (CVE-2026-32258). Confidential information can be exposed externally. Exploitable via ``backend.manage_editor``. Mitigation: upgrade to `1.2.13` or later.
|
| CVE-2026-32257 |
|
Cross-Site Scripting (XSS) in winter/wn-backend-module (CVE-2026-32257)
cross-site scripting in winter/wn-backend-module (CVE-2026-32257). Confidential information can be exposed externally. Exploitable via ``backend.manage_branding``. Mitigation: upgrade to `1.2.13` or later.
|