dbcve.org
Vulnerability index

Browse CVEs

10,000+ matching
Cards Compact
Filters 1 Clear all
Severity

Filters apply as you choose them.

Filtering by weakness Cross-site Scripting (XSS)CWE-79 × clear
Top technology Linux 13140 Google 12530 Microsoft 12379 Oracle 6737 Apple 6692 Adobe 6387 Ibm 6330 Cisco 5757 Debian 3919 Mozilla 2895 Apache 2864 Redhat 2592
Unclassified HIGH 7.1
CVE-2026-54191

Unauthenticated Cross Site Scripting (XSS) in Pods <= 3.3.8 versions.

Mitigation only
Fix from $1,950 2026-06-16
Unclassified HIGH 7.1
CVE-2026-54198

Unauthenticated Cross Site Scripting (XSS) in Media LIbrary Assistant <= 3.35 versions.

Mitigation only
Fix from $1,950 2026-06-16
Unclassified HIGH 7.1
CVE-2026-39437

Unauthenticated Cross Site Scripting (XSS) in Min Max Step Quantity Limits Manager for WooCommerce <= 5.2.2 versions.

No fix yet
Fix from $1,950 2026-06-16
Unclassified MEDIUM 6.4
CVE-2026-10093

The File Sharing & Download Manager – User Private Files plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'fldr_ttl' paramet…

Mitigation only
Fix from $1,600 2026-06-16
Unclassified MEDIUM 6.1
CVE-2026-48157

Slim is a PHP micro framework that enables users to write simple web applications and APIs. In versions 4.4.0 through 4.15, if an application uses Ht…

Mitigation only
Fix from $1,600 2026-06-15
Unclassified HIGH 7.1
CVE-2026-52702

Unauthenticated Cross Site Scripting (XSS) in SEO Redirection <= 9.17 versions.

Mitigation only
Fix from $1,950 2026-06-15
Unclassified MEDIUM 6.5
CVE-2026-49773

Subscriber Cross Site Scripting (XSS) in FV Flowplayer Video Player < 7.5.51.7212 versions.

Mitigation only
Fix from $1,600 2026-06-15
Unclassified HIGH 7.1
CVE-2026-48966

Unauthenticated Cross Site Scripting (XSS) in Funnel Builder by FunnelKit <= 3.15.0.2 versions.

Mitigation only
Fix from $1,950 2026-06-15
Unclassified HIGH 7.1
CVE-2026-49055

Unauthenticated Cross Site Scripting (XSS) in Drag and Drop Multiple File Upload – Contact Form 7 <= 1.3.9.7 versions.

Mitigation only
Fix from $1,950 2026-06-15
Unclassified HIGH 7.1
CVE-2026-48876

Unauthenticated Cross Site Scripting (XSS) in Stop Spammers <= 2026.3 versions.

Mitigation only
Fix from $1,950 2026-06-15
Unclassified MEDIUM 6.5
CVE-2026-48880

Subscriber Cross Site Scripting (XSS) in WP Job Portal <= 2.5.2 versions.

Mitigation only
Fix from $1,600 2026-06-15
Unclassified HIGH 7.1
CVE-2026-48885

Unauthenticated Cross Site Scripting (XSS) in HollerBox <= 2.3.10.1 versions.

Mitigation only
Fix from $1,950 2026-06-15
Unclassified HIGH 7.1
CVE-2026-48838

Unauthenticated Cross Site Scripting (XSS) in Post SMTP <= 3.6.2 versions.

No fix yet
Fix from $1,950 2026-06-15
Unclassified HIGH 7.1
CVE-2026-48867

Unauthenticated Cross Site Scripting (XSS) in Quiz And Survey Master <= 11.1.2 versions.

Mitigation only
Fix from $1,950 2026-06-15
Unclassified MEDIUM 6.5
CVE-2026-48870

Subscriber Cross Site Scripting (XSS) in King Addons for Elementor <= 51.1.62 versions.

Mitigation only
Fix from $1,600 2026-06-15
Unclassified HIGH 7.1
CVE-2026-48871

Unauthenticated Cross Site Scripting (XSS) in MW WP Form <= 5.1.3 versions.

Mitigation only
Fix from $1,950 2026-06-15
Unclassified HIGH 7.1
CVE-2026-45437

Unauthenticated Cross Site Scripting (XSS) in Product Filter Widget for Elementor <= 1.0.6 versions.

Mitigation only
Fix from $1,950 2026-06-15
Unclassified HIGH 7.1
CVE-2026-42775

Unauthenticated Cross Site Scripting (XSS) in AutomatorWP <= 5.7.2 versions.

Mitigation only
Fix from $1,950 2026-06-15
Unclassified MEDIUM 6.5
CVE-2026-42663

Unauthenticated Cross Site Scripting (XSS) in Simple Membership <= 4.7.2 versions.

Mitigation only
Fix from $1,600 2026-06-15
Unclassified HIGH 7.1
CVE-2026-42686

Subscriber Cross Site Scripting (XSS) in EventPrime <= 4.3.2.1 versions.

Mitigation only
Fix from $1,950 2026-06-15
Unclassified MEDIUM 6.5
CVE-2026-42688

Subscriber Cross Site Scripting (XSS) in Modula Image Gallery <= 2.14.23 versions.

Mitigation only
Fix from $1,600 2026-06-15
Unclassified MEDIUM 6.5
CVE-2026-42656

Subscriber Cross Site Scripting (XSS) in Contest Gallery <= 28.1.6 versions.

Mitigation only
Fix from $1,600 2026-06-15
Unclassified HIGH 7.1
CVE-2026-42658

Unauthenticated Cross Site Scripting (XSS) in Classified Listing <= 5.3.8 versions.

Mitigation only
Fix from $1,950 2026-06-15
Unclassified HIGH 7.1
CVE-2026-42649

Unauthenticated Cross Site Scripting (XSS) in Favicon Rotator <= 1.2.11 versions.

Mitigation only
Fix from $1,950 2026-06-15
Unclassified HIGH 7.2
CVE-2026-42650

Unauthenticated Cross Site Scripting (XSS) in AutomatorWP <= 5.6.7 versions.

Mitigation only
Fix from $1,950 2026-06-15
Unclassified MEDIUM 6.5
CVE-2026-41556

Subscriber Cross Site Scripting (XSS) in ProfilePress <= 4.16.13 versions.

Mitigation only
Fix from $1,600 2026-06-15
Unclassified HIGH 7.1
CVE-2026-40791

Unauthenticated Cross Site Scripting (XSS) in WP Time Slots Booking Form <= 1.2.46 versions.

Mitigation only
Fix from $1,950 2026-06-15
Unclassified HIGH 7.1
CVE-2026-40787

Unauthenticated Cross Site Scripting (XSS) in Quiz And Survey Master <= 11.0.0 versions.

Mitigation only
Fix from $1,950 2026-06-15
Unclassified HIGH 7.1
CVE-2026-40770

Unauthenticated Cross Site Scripting (XSS) in Coupon Affiliates <= 7.5.3 versions.

Mitigation only
Fix from $1,950 2026-06-15
Unclassified HIGH 7.1
CVE-2026-40732

Unauthenticated Cross Site Scripting (XSS) in Notification for Telegram <= 3.5 versions.

Mitigation only
Fix from $1,950 2026-06-15