Vulnerability index

Browse CVEs

10,000+ matching
Filters 1 Clear all
Severity

Filters apply as you choose them.

Filtering by weakness Cross-site Scripting (XSS)CWE-79 × clear
Unclassified MEDIUM 5.9
CVE-2026-73344

Author Cross Site Scripting (XSS) in WP Data Access <= 5.5.79 versions.

No fix yet
Fix from $4,000 2026-08-13
Unclassified HIGH 7.1
CVE-2026-66697

Unauthenticated Cross Site Scripting (XSS) in Colissimo Officiel : Méthodes de livraison pour WooCommerce <= 2.10.0 versions.

No fix yet
Fix from $4,900 2026-08-13
Unclassified HIGH 7.1
CVE-2026-66698

Unauthenticated Cross Site Scripting (XSS) in SureDash <= 1.10.1 versions.

No fix yet
Fix from $4,900 2026-08-13
Unclassified HIGH 7.1
CVE-2026-66700

Unauthenticated Cross Site Scripting (XSS) in Smart Online Order for Clover <= 1.6.1 versions.

No fix yet
Fix from $4,900 2026-08-13
Unclassified HIGH 7.1
CVE-2026-66655

Unauthenticated Cross Site Scripting (XSS) in MultiParcels Shipping For WooCommerce <= 1.30.36 versions.

No fix yet
Fix from $4,900 2026-08-13
Unclassified MEDIUM 6.5
CVE-2026-66687

Customer Cross Site Scripting (XSS) in WpBookingly <= 1.3.2 versions.

No fix yet
Fix from $4,000 2026-08-13
Unclassified MEDIUM 6.5
CVE-2026-66467

Subscriber Cross Site Scripting (XSS) in FluentCommunity <= 2.7.5 versions.

No fix yet
Fix from $4,000 2026-08-13
Unclassified HIGH 7.1
CVE-2026-66468

Unauthenticated Cross Site Scripting (XSS) in Local Delivery Drivers for WooCommerce <= 3.0.0 versions.

No fix yet
Fix from $4,900 2026-08-13
Unclassified MEDIUM 6.5
CVE-2026-66471

Subscriber Cross Site Scripting (XSS) in Accordion <= 3.0.6 versions.

No fix yet
Fix from $4,000 2026-08-13
Unclassified MEDIUM 6.5
CVE-2026-66460

Subscriber Cross Site Scripting (XSS) in AfterShip Tracking <= 1.18.1 versions.

No fix yet
Fix from $4,000 2026-08-13
Unclassified HIGH 7.1
CVE-2026-66449

Unauthenticated Cross Site Scripting (XSS) in Geo Mashup <= 1.13.18 versions.

No fix yet
Fix from $4,900 2026-08-13
Unclassified MEDIUM 6.5
CVE-2026-66456

Subscriber Cross Site Scripting (XSS) in Profile Extra Fields by BestWebSoft <= 1.3.4 versions.

No fix yet
Fix from $4,000 2026-08-13
Unclassified HIGH 7.1
CVE-2026-65580

Unauthenticated Cross Site Scripting (XSS) in Agrion <= 1.0.0 versions.

No fix yet
Fix from $4,900 2026-08-13
Unclassified HIGH 7.1
CVE-2026-66426

Unauthenticated Cross Site Scripting (XSS) in WP-Stats <= 2.56 versions.

No fix yet
Fix from $4,900 2026-08-13
Unclassified HIGH 7.1
CVE-2026-66429

Unauthenticated Cross Site Scripting (XSS) in Visitor Traffic Real Time Statistics Pro <= 11.10 versions.

No fix yet
Fix from $4,900 2026-08-13
Unclassified HIGH 7.1
CVE-2026-61974

Unauthenticated Cross Site Scripting (XSS) in Mang Board WP <= 2.3.4 versions.

No fix yet
Fix from $4,900 2026-08-13
Unclassified HIGH 7.1
CVE-2026-61960

Unauthenticated Cross Site Scripting (XSS) in WP Full Stripe Free <= 8.5.0 versions.

No fix yet
Fix from $4,900 2026-08-13
Unclassified HIGH 7.1
CVE-2026-61965

Unauthenticated Cross Site Scripting (XSS) in GeekyBot <= 1.2.6 versions.

No fix yet
Fix from $4,900 2026-08-13
Unclassified HIGH 7.1
CVE-2026-28187

Unauthenticated Cross Site Scripting (XSS) in Knowledge Base for Documentation, FAQs with AI Assistance <= 17.211.0 versions.

No fix yet
Fix from $4,900 2026-08-13
Unclassified HIGH 7.1
CVE-2026-28170

Unauthenticated Cross Site Scripting (XSS) in Blog Floating Button <= 1.4.20 versions.

No fix yet
Fix from $4,900 2026-08-13
Unclassified HIGH 7.1
CVE-2026-28175

Unauthenticated Cross Site Scripting (XSS) in Visitors Traffic Real Time Statistics <= 8.11 versions.

No fix yet
Fix from $4,900 2026-08-13
Unclassified MEDIUM 6.5
CVE-2026-28182

Subscriber Cross Site Scripting (XSS) in AcyMailing SMTP Newsletter <= 10.11.1 versions.

No fix yet
Fix from $4,000 2026-08-13
Unclassified HIGH 7.1
CVE-2026-28158

Unauthenticated Cross Site Scripting (XSS) in Do Lasso <= 358 versions.

No fix yet
Fix from $4,900 2026-08-13
Unclassified HIGH 7.1
CVE-2026-28003

Unauthenticated Cross Site Scripting (XSS) in Maspik – Spam blacklist <= 2.9.1 versions.

No fix yet
Fix from $4,900 2026-08-13
Unclassified HIGH 7.1
CVE-2026-28004

Unauthenticated Cross Site Scripting (XSS) in Business Directory <= 6.4.25 versions.

No fix yet
Fix from $4,900 2026-08-13
Unclassified HIGH 7.1
CVE-2026-27536

Unauthenticated Cross Site Scripting (XSS) in MailChimp Subscribe Forms <= 4.3.3 versions.

No fix yet
Fix from $4,900 2026-08-13
Unclassified MEDIUM 6.5
CVE-2026-27537

Unauthenticated Cross Site Scripting (XSS) in Popup by Supsystic <= 1.11.2 versions.

No fix yet
Fix from $4,000 2026-08-13
Unclassified HIGH 7.1
CVE-2026-27539

Unauthenticated Cross Site Scripting (XSS) in Welcart e-Commerce <= 2.11.31 versions.

No fix yet
Fix from $4,900 2026-08-13
Unclassified MEDIUM 5.1
CVE-2026-19716

Stored Cross-site Scripting (CWE-79) in the user management component in maalfer Pentestify before 1.1.1 allows an authenticated attacker to execute …

No fix yet
Fix from $4,000 2026-08-13
Unclassified MEDIUM 6.1
CVE-2026-73628

Serendipity versions >= 2.3.5 and <= 2.6.0 contain a reflected cross-site scripting vulnerability in the search clean-URL route (/search/<term>). In …

No fix yet
Fix from $4,000 2026-08-13