Vulnerabilities (CVE)

Filtered by CWE-79
Total 47185 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2026-66697 2026-08-14 N/A 7.1 HIGH
Unauthenticated Cross Site Scripting (XSS) in Colissimo Officiel : Méthodes de livraison pour WooCommerce <= 2.10.0 versions.
CVE-2026-66687 2026-08-14 N/A 6.5 MEDIUM
Customer Cross Site Scripting (XSS) in WpBookingly <= 1.3.2 versions.
CVE-2026-66471 2026-08-14 N/A 6.5 MEDIUM
Subscriber Cross Site Scripting (XSS) in Accordion <= 3.0.6 versions.
CVE-2026-66698 2026-08-14 N/A 7.1 HIGH
Unauthenticated Cross Site Scripting (XSS) in SureDash <= 1.10.1 versions.
CVE-2026-73357 2026-08-14 N/A 6.5 MEDIUM
Donor Cross Site Scripting (XSS) in GiveWP < 4.16.6 versions.
CVE-2026-73344 2026-08-14 N/A 5.9 MEDIUM
Author Cross Site Scripting (XSS) in WP Data Access <= 5.5.79 versions.
CVE-2026-73340 2026-08-14 N/A 6.5 MEDIUM
Contributor Cross Site Scripting (XSS) in Featured Image from URL <= 5.3.3 versions.
CVE-2026-66467 2026-08-14 N/A 6.5 MEDIUM
Subscriber Cross Site Scripting (XSS) in FluentCommunity <= 2.7.5 versions.
CVE-2026-66468 2026-08-14 N/A 7.1 HIGH
Unauthenticated Cross Site Scripting (XSS) in Local Delivery Drivers for WooCommerce <= 3.0.0 versions.
CVE-2026-28154 2026-08-14 N/A 7.1 HIGH
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in snstheme Samex - Clean, Minimal Shop WooCommerce WordPress Theme and snstheme M.Anh - Fashion WooCoommerce WordPress Theme allows Reflected XSS. This issue affects Samex - Clean, Minimal Shop WooCommerce WordPress Theme: from n/a through 2.5; M.Anh - Fashion WooCoommerce WordPress Theme: from n/a through 1.7.
CVE-2026-66429 2026-08-14 N/A 7.1 HIGH
Unauthenticated Cross Site Scripting (XSS) in Visitor Traffic Real Time Statistics Pro <= 11.10 versions.
CVE-2026-27539 2026-08-14 N/A 7.1 HIGH
Unauthenticated Cross Site Scripting (XSS) in Welcart e-Commerce <= 2.11.31 versions.
CVE-2026-28004 2026-08-14 N/A 7.1 HIGH
Unauthenticated Cross Site Scripting (XSS) in Business Directory <= 6.4.25 versions.
CVE-2026-28170 2026-08-14 N/A 7.1 HIGH
Unauthenticated Cross Site Scripting (XSS) in Blog Floating Button <= 1.4.20 versions.
CVE-2026-65580 2026-08-14 N/A 7.1 HIGH
Unauthenticated Cross Site Scripting (XSS) in Agrion <= 1.0.0 versions.
CVE-2026-28182 2026-08-14 N/A 6.5 MEDIUM
Subscriber Cross Site Scripting (XSS) in AcyMailing SMTP Newsletter <= 10.11.1 versions.
CVE-2026-27537 2026-08-14 N/A 6.5 MEDIUM
Unauthenticated Cross Site Scripting (XSS) in Popup by Supsystic <= 1.11.2 versions.
CVE-2026-66449 2026-08-14 N/A 7.1 HIGH
Unauthenticated Cross Site Scripting (XSS) in Geo Mashup <= 1.13.18 versions.
CVE-2026-27536 2026-08-14 N/A 7.1 HIGH
Unauthenticated Cross Site Scripting (XSS) in MailChimp Subscribe Forms <= 4.3.3 versions.
CVE-2026-66460 2026-08-14 N/A 6.5 MEDIUM
Subscriber Cross Site Scripting (XSS) in AfterShip Tracking <= 1.18.1 versions.