Export limit exceeded: 50414 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.
Search
Search Results (50414 CVEs found)
| CVE | Vendors | Products | Updated | CVSS v3.1 |
|---|---|---|---|---|
| CVE-2026-96835 | 2026-09-30 | 6.5 Medium | ||
| Contributor Cross Site Scripting (XSS) in King Addons for Elementor <= 51.1.85 versions. | ||||
| CVE-2026-96830 | 2026-09-30 | 7.1 High | ||
| Unauthenticated Cross Site Scripting (XSS) in GiveWP <= 4.16.9 versions. | ||||
| CVE-2026-96829 | 2026-09-30 | 6.5 Medium | ||
| Contributor Cross Site Scripting (XSS) in The Plus Addons for Elementor Page Builder Lite <= 6.5.1 versions. | ||||
| CVE-2026-96820 | 2026-09-30 | 7.1 High | ||
| Subscriber Cross Site Scripting (XSS) in Awesome Support <= 6.3.9 versions. | ||||
| CVE-2026-96819 | 2026-09-30 | 7.1 High | ||
| Subscriber Cross Site Scripting (XSS) in oik <= 4.15.4 versions. | ||||
| CVE-2026-96816 | 2026-09-30 | 7.1 High | ||
| Unauthenticated Cross Site Scripting (XSS) in Trusted Shops Easy Integration for WooCommerce <= 2.0.6 versions. | ||||
| CVE-2026-96814 | 2026-09-30 | 7.1 High | ||
| Unauthenticated Cross Site Scripting (XSS) in WooCommerce Product Table Lite <= 5.6.7 versions. | ||||
| CVE-2026-96450 | 2026-09-30 | 5.4 Medium | ||
| Contributor Cross Site Scripting (XSS) in pixfort Core < 4.3.3 versions. | ||||
| CVE-2026-96352 | 2026-09-30 | 7.1 High | ||
| Unauthenticated Cross Site Scripting (XSS) in YITH WooCommerce Ajax Search <= 2.28.0 versions. | ||||
| CVE-2026-96351 | 2026-09-30 | 7.1 High | ||
| Unauthenticated Cross Site Scripting (XSS) in Classified Listing <= 6.1.3 versions. | ||||
| CVE-2026-96338 | 2026-09-30 | 6.5 Medium | ||
| Subscriber Cross Site Scripting (XSS) in Profile Builder <= 4.0.2 versions. | ||||
| CVE-2026-94674 | 2026-09-30 | 6.5 Medium | ||
| Contributor Cross Site Scripting (XSS) in Pixel Manager for WooCommerce <= 1.69.0 versions. | ||||
| CVE-2026-94081 | 2026-09-30 | 7.1 High | ||
| Unauthenticated Cross Site Scripting (XSS) in WordPress Persistent Login <= 3.1.3 versions. | ||||
| CVE-2026-94078 | 2026-09-30 | 7.1 High | ||
| Unauthenticated Cross Site Scripting (XSS) in Site Reviews <= 8.3.1 versions. | ||||
| CVE-2026-94077 | 2026-09-30 | 6.5 Medium | ||
| Contributor Cross Site Scripting (XSS) in Safe SVG <= 2.5.0 versions. | ||||
| CVE-2026-93770 | 2026-09-30 | 7.1 High | ||
| Unauthenticated Cross Site Scripting (XSS) in WP Statistics <= 14.16.13 versions. | ||||
| CVE-2026-93514 | 2026-09-30 | 7.1 High | ||
| Unauthenticated Cross Site Scripting (XSS) in Notification for Telegram <= 3.5.2 versions. | ||||
| CVE-2026-93512 | 2026-09-30 | 7.1 High | ||
| Unauthenticated Cross Site Scripting (XSS) in JW Player for WordPress <= 2.3.11 versions. | ||||
| CVE-2026-92424 | 2026-09-30 | 6.8 Medium | ||
| The Content Egg WordPress plugin before 11.9.0 does not verify that a user running its bulk content-import feature is authorized for the import preset they select, and switches to the preset author's identity before creating the resulting post, allowing users with contributor-level access and above to store arbitrary web scripts unfiltered under a privileged user's account, executing in the context of anyone who later views that content. | ||||
| CVE-2026-91832 | 2026-09-30 | 7.1 High | ||
| The WP Mobile Menu WordPress plugin before 2.9 does not correctly verify the nonce on its settings import, so an attacker can import arbitrary WP Mobile Menu WordPress plugin before 2.9 settings through a cross-site request in an administrator's session, and the imported values are then output unescaped to every visitor, resulting in Stored Cross-Site Scripting. | ||||