Vulnerability index

Browse CVEs

10,000+ matching
Filters 1 Clear all
Severity

Filters apply as you choose them.

Filtering by weakness Cross-site Scripting (XSS)CWE-79 × clear
Unclassified MEDIUM 6.5
CVE-2026-65518

Contributor Cross Site Scripting (XSS) in Accept Donations with PayPal & Stripe <= 1.5.5 versions.

No fix yet
Fix from $1,600 2026-07-23
Unclassified MEDIUM 6.5
CVE-2026-65519

Author Cross Site Scripting (XSS) in Photo Gallery <= 2.7.7.29 versions.

No fix yet
Fix from $1,600 2026-07-23
Unclassified MEDIUM 6.5
CVE-2026-65503

Contributor Cross Site Scripting (XSS) in Ultimate Store Kit Elementor Addons <= 3.0.5 versions.

No fix yet
Fix from $1,600 2026-07-23
Unclassified HIGH 7.1
CVE-2026-65492

Unauthenticated Cross Site Scripting (XSS) in Dokan Pro <= 5.0.0 versions.

No fix yet
Fix from $1,950 2026-07-23
Unclassified MEDIUM 6.5
CVE-2026-65482

Contributor Cross Site Scripting (XSS) in LA-Studio Element Kit for Elementor <= 1.6.2 versions.

No fix yet
Fix from $1,600 2026-07-23
Unclassified MEDIUM 5.9
CVE-2026-65483

Author Cross Site Scripting (XSS) in HashThemes Demo Importer <= 1.4.2 versions.

No fix yet
Fix from $1,600 2026-07-23
Unclassified MEDIUM 6.5
CVE-2026-65473

Contributor Cross Site Scripting (XSS) in Virtue/Ascend/Pinnacle Toolkit <= 4.9.12 versions.

No fix yet
Fix from $1,600 2026-07-23
Unclassified MEDIUM 6.5
CVE-2026-65475

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WP Chill Modula Image Gallery allows Stored XSS…

No fix yet
Fix from $1,600 2026-07-23
Unclassified MEDIUM 6.5
CVE-2026-65480

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in CodexThemes TheGem allows DOM-Based XSS. This …

No fix yet
Fix from $1,600 2026-07-23
Unclassified MEDIUM 6.5
CVE-2026-65465

Contributor Cross Site Scripting (XSS) in JetElements For Elementor <= 2.9.1.1 versions.

No fix yet
Fix from $1,600 2026-07-23
Unclassified MEDIUM 6.5
CVE-2026-65470

Contributor Cross Site Scripting (XSS) in Fluent Support <= 2.3.0 versions.

No fix yet
Fix from $1,600 2026-07-23
Unclassified MEDIUM 6.5
CVE-2026-65449

Contributor Cross Site Scripting (XSS) in MapSVG <= 8.14.0 versions.

No fix yet
Fix from $1,600 2026-07-23
Intellij Idea MEDIUM 6.1
CVE-2026-64810

In JetBrains IntelliJ IDEA before 2026.2 hTML injection was possible in an IDE notification, allowing silent user activity tracking

Fix: 2026.2+
Fix from $1,600 2026-07-23
Unclassified HIGH 7.1
CVE-2026-61944

Unauthenticated Cross Site Scripting (XSS) in Bookly <= 27.7 versions.

No fix yet
Fix from $1,950 2026-07-23
Unclassified HIGH 7.1
CVE-2026-61947

Unauthenticated Cross Site Scripting (XSS) in Form Vibes – Database Manager for Forms <= 1.5.2 versions.

No fix yet
Fix from $1,950 2026-07-23
Unclassified HIGH 7.1
CVE-2026-59517

Unauthenticated Cross Site Scripting (XSS) in Easy Form Builder <= 4.0.12 versions.

No fix yet
Fix from $1,950 2026-07-23
Unclassified HIGH 7.1
CVE-2026-59512

Unauthenticated Cross Site Scripting (XSS) in Product Enquiry for WooCommerce <= 2.2.34.43 versions.

No fix yet
Fix from $1,950 2026-07-23
Unclassified MEDIUM 6.5
CVE-2026-59513

Subscriber Cross Site Scripting (XSS) in Masteriyo - LMS <= 2.3.0 versions.

No fix yet
Fix from $1,600 2026-07-23
Unclassified HIGH 7.1
CVE-2026-57735

Unauthenticated Cross Site Scripting (XSS) in Breakdance <= 2.7.1 versions.

No fix yet
Fix from $1,950 2026-07-23
Unclassified HIGH 7.1
CVE-2026-57767

Unauthenticated Cross Site Scripting (XSS) in WP Google Maps Pro <= 10.1.02 versions.

No fix yet
Fix from $1,950 2026-07-23
Unclassified HIGH 7.1
CVE-2026-57769

Unauthenticated Cross Site Scripting (XSS) in Grand Photography <= 5.7.8 versions.

No fix yet
Fix from $1,950 2026-07-23
Unclassified HIGH 7.1
CVE-2026-57809

Unauthenticated Cross Site Scripting (XSS) in AffiliateWP <= 2.34.0 versions.

No fix yet
Fix from $1,950 2026-07-23
Unclassified HIGH 7.1
CVE-2026-57699

Subscriber Cross Site Scripting (XSS) in Slider Pro <= 4.8.13 versions.

No fix yet
Fix from $1,950 2026-07-23
Unclassified HIGH 7.1
CVE-2026-57701

Unauthenticated Cross Site Scripting (XSS) in Real Estate Manager Pro <= 12.8.5 versions.

No fix yet
Fix from $1,950 2026-07-23
Unclassified HIGH 7.1
CVE-2026-57704

Unauthenticated Cross Site Scripting (XSS) in Smart Manager <= 8.90.0 versions.

No fix yet
Fix from $1,950 2026-07-23
Unclassified HIGH 7.1
CVE-2026-57370

Unauthenticated Cross Site Scripting (XSS) in Visitor Traffic Real Time Statistics Pro <= 11.9.1 versions.

No fix yet
Fix from $1,950 2026-07-23
Unclassified MEDIUM 6.5
CVE-2026-57373

Customer Cross Site Scripting (XSS) in Funnel Kit Funnel Builder PRO <= 3.15.0.4 versions.

No fix yet
Fix from $1,600 2026-07-23
Unclassified HIGH 7.1
CVE-2026-57374

Unauthenticated Cross Site Scripting (XSS) in Funnel Kit Funnel Builder PRO <= 3.15.0.7 versions.

No fix yet
Fix from $1,950 2026-07-23
Unclassified MEDIUM 6.5
CVE-2026-57384

Subscriber Cross Site Scripting (XSS) in WishList Member X <= 3.32.0 versions.

No fix yet
Fix from $1,600 2026-07-23
Unclassified HIGH 7.1
CVE-2026-57397

Unauthenticated Cross Site Scripting (XSS) in Coaching <= 3.9.2 versions.

No fix yet
Fix from $1,950 2026-07-23