CVE Intelligence
Home / CVEs

CVE Database

Published vulnerabilities with severity, known exploitation and official sources.

Severity
Clear

10.085 result(s)

Export this search: RSS · CSV · STIX
CVE-2026-97253 High · 7.1 CWE-79 Sep 30, 2026
WordPress LayerSlider plugin <= 8.4.0 - Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Kreatura LayerSlider allows Reflected XSS. This issue affects LayerSlider: from n/a through 8.4.0.
CVE-2026-97250 High · 7.1 CWE-79 Sep 30, 2026
WordPress Geo Mashup plugin <= 1.13.21 - Cross Site Scripting (XSS) vulnerability
Unauthenticated Cross Site Scripting (XSS) in Geo Mashup <= 1.13.21 versions.
CVE-2026-97238 Medium · 5.5 CWE-79 Sep 30, 2026
WordPress JetEngine plugin <= 3.8.14.3 - Cross Site Scripting (XSS) vulnerability
Subscriber Cross Site Scripting (XSS) in JetEngine <= 3.8.14.3 versions.
CVE-2026-97237 High · 7.1 CWE-79 Sep 30, 2026
WordPress JetEngine plugin <= 3.8.14.3 - Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Crocoblock JetEngine jet-engine allows DOM-Based XSS.This issue affects JetEngine: from n/a through 3.8.14.3.
CVE-2026-97236 Medium · 6.5 CWE-79 Sep 30, 2026
WordPress ThemeREX Addons plugin < 2.45.0 - Cross Site Scripting (XSS) vulnerability
Subscriber Cross Site Scripting (XSS) in ThemeREX Addons < 2.45.0 versions.
CVE-2026-97235 High · 7.1 CWE-79 Sep 30, 2026
WordPress ThemeREX Addons plugin < 2.45.0 - Cross Site Scripting (XSS) vulnerability
Unauthenticated Cross Site Scripting (XSS) in ThemeREX Addons < 2.45.0 versions.
CVE-2026-97077 High · 7.1 CWE-79 Sep 30, 2026
WordPress Ad Inserter plugin <= 2.8.18 - Cross Site Scripting (XSS) vulnerability
Unauthenticated Cross Site Scripting (XSS) in Ad Inserter <= 2.8.18 versions.
CVE-2026-97067 Medium · 6.5 CWE-79 Sep 30, 2026
WordPress EWWW Image Optimizer plugin <= 8.7.7 - Cross Site Scripting (XSS) vulnerability
Contributor Cross Site Scripting (XSS) in EWWW Image Optimizer <= 8.7.7 versions.
CVE-2026-97065 High · 7.1 CWE-79 Sep 30, 2026
WordPress Happyforms plugin <= 1.26.15 - Cross Site Scripting (XSS) vulnerability
Unauthenticated Cross Site Scripting (XSS) in Happyforms <= 1.26.15 versions.
CVE-2026-96836 High · 7.1 CWE-79 Sep 30, 2026
WordPress Parsi Date plugin <= 6.3 - Cross Site Scripting (XSS) vulnerability
Unauthenticated Cross Site Scripting (XSS) in Parsi Date <= 6.3 versions.
CVE-2026-96835 Medium · 6.5 CWE-79 Sep 30, 2026
WordPress King Addons for Elementor plugin <= 51.1.85 - Cross Site Scripting (XSS) vulnerability
Contributor Cross Site Scripting (XSS) in King Addons for Elementor <= 51.1.85 versions.
CVE-2026-96830 High · 7.1 CWE-79 Sep 30, 2026
WordPress GiveWP plugin <= 4.16.9 - Cross Site Scripting (XSS) vulnerability
Unauthenticated Cross Site Scripting (XSS) in GiveWP <= 4.16.9 versions.
CVE-2026-96829 Medium · 6.5 CWE-79 Sep 30, 2026
WordPress The Plus Addons for Elementor Page Builder Lite plugin <= 6.5.1 - Cross Site Scripting (XSS) vulnerability
Contributor Cross Site Scripting (XSS) in The Plus Addons for Elementor Page Builder Lite <= 6.5.1 versions.
CVE-2026-96820 High · 7.1 CWE-79 Sep 30, 2026
WordPress Awesome Support plugin <= 6.3.9 - Cross Site Scripting (XSS) vulnerability
Subscriber Cross Site Scripting (XSS) in Awesome Support <= 6.3.9 versions.
CVE-2026-96819 High · 7.1 CWE-79 Sep 30, 2026
WordPress oik plugin <= 4.15.4 - Cross Site Scripting (XSS) vulnerability
Subscriber Cross Site Scripting (XSS) in oik <= 4.15.4 versions.
CVE-2026-96816 High · 7.1 CWE-79 Sep 30, 2026
WordPress Trusted Shops Easy Integration for WooCommerce plugin <= 2.0.6 - Cross Site Scripting (XSS) vulnerability
Unauthenticated Cross Site Scripting (XSS) in Trusted Shops Easy Integration for WooCommerce <= 2.0.6 versions.
CVE-2026-96814 High · 7.1 CWE-79 Sep 30, 2026
WordPress WooCommerce Product Table Lite plugin <= 5.6.7 - Cross Site Scripting (XSS) vulnerability
Unauthenticated Cross Site Scripting (XSS) in WooCommerce Product Table Lite <= 5.6.7 versions.
CVE-2026-96450 Medium · 5.4 CWE-79 Sep 30, 2026
WordPress pixfort Core plugin < 4.3.3 - Cross Site Scripting (XSS) vulnerability
Contributor Cross Site Scripting (XSS) in pixfort Core < 4.3.3 versions.
CVE-2026-96352 High · 7.1 CWE-79 Sep 30, 2026
WordPress YITH WooCommerce Ajax Search plugin <= 2.28.0 - Cross Site Scripting (XSS) vulnerability
Unauthenticated Cross Site Scripting (XSS) in YITH WooCommerce Ajax Search <= 2.28.0 versions.
CVE-2026-96351 High · 7.1 CWE-79 Sep 30, 2026
WordPress Classified Listing plugin <= 6.1.3 - Cross Site Scripting (XSS) vulnerability
Unauthenticated Cross Site Scripting (XSS) in Classified Listing <= 6.1.3 versions.
CVE-2026-96338 Medium · 6.5 CWE-79 Sep 30, 2026
WordPress Profile Builder plugin <= 4.0.2 - Cross Site Scripting (XSS) vulnerability
Subscriber Cross Site Scripting (XSS) in Profile Builder <= 4.0.2 versions.
CVE-2026-94674 Medium · 6.5 CWE-79 Sep 30, 2026
WordPress Pixel Manager for WooCommerce plugin <= 1.69.0 - Cross Site Scripting (XSS) vulnerability
Contributor Cross Site Scripting (XSS) in Pixel Manager for WooCommerce <= 1.69.0 versions.
CVE-2026-94081 High · 7.1 CWE-79 Sep 30, 2026
WordPress WordPress Persistent Login plugin <= 3.1.3 - Cross Site Scripting (XSS) vulnerability
Unauthenticated Cross Site Scripting (XSS) in WordPress Persistent Login <= 3.1.3 versions.
CVE-2026-94078 High · 7.1 CWE-79 Sep 30, 2026
WordPress Site Reviews plugin <= 8.3.1 - Cross Site Scripting (XSS) vulnerability
Unauthenticated Cross Site Scripting (XSS) in Site Reviews <= 8.3.1 versions.
CVE-2026-94077 Medium · 6.5 CWE-79 Sep 30, 2026
WordPress Safe SVG plugin <= 2.5.0 - Cross Site Scripting (XSS) vulnerability
Contributor Cross Site Scripting (XSS) in Safe SVG <= 2.5.0 versions.