Lester Chan vulnerabilities
Published CVEs affecting Lester Chan products: 3 record(s), with severity, exploitation and fixes.
CVE-2026-66426
High · 7.1
CWE-79 Aug 13, 2026
WordPress WP-Stats plugin <= 2.56 - Cross Site Scripting (XSS) vulnerability
Unauthenticated Cross Site Scripting (XSS) in WP-Stats <= 2.56 versions.
CVE-2025-68081
Medium · 5.9
CWE-79 Jul 23, 2026
WordPress WP-Polls plugin <= 2.77.3 - Cross Site Scripting (XSS) vulnerability
Administrator Cross Site Scripting (XSS) in WP-Polls <= 2.77.3 versions.
CVE-2025-67541
Medium · 6.5
CWE-79 Dec 9, 2025
WordPress WP-ShowHide plugin <= 1.05 - Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Lester Chan WP-ShowHide wp-showhide allows Stored XSS.This issue affects WP-ShowHide: from n/a through <= 1.05.