Vulnerability index

Browse CVEs

10,000+ matching
Filters 1 Clear all
Severity

Filters apply as you choose them.

Filtering by weakness Cross-site Scripting (XSS)CWE-79 × clear
N8n CRITICAL 9.0
CVE-2026-33749

n8n is an open source workflow automation platform. Prior to versions 1.123.27, 2.13.3, and 2.14.1, an authenticated user with permission to create o…

Fix: 1.123.27 / 2.13.3+
Fix from $2,300 2026-03-25
Seafile Server HIGH 8.7
CVE-2026-30587

Multiple Stored XSS vulnerabilities exist in Seafile Server version 13.0.15,13.0.16-pro,12.0.14 and prior and fixed in 13.0.17, 13.0.17-pro, and 12.0…

Fix: 12.0.20+
Fix from $1,950 2026-03-25
Unclassified HIGH 7.1
CVE-2026-32542

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in ThemeFusion Fusion Builder fusion-builder allow…

Mitigation only
Fix from $1,950 2026-03-25
Unclassified HIGH 7.1
CVE-2026-32544

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in OOPSpam Team OOPSpam Anti-Spam oopspam-anti-spa…

Mitigation only
Fix from $1,950 2026-03-25
Unclassified HIGH 7.1
CVE-2026-32545

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Taboola Taboola Pixel taboola-pixel allows Refl…

Mitigation only
Fix from $1,950 2026-03-25
Unclassified HIGH 7.1
CVE-2026-32540

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Bookly Bookly bookly-responsive-appointment-boo…

Mitigation only
Fix from $1,950 2026-03-25
Unclassified HIGH 7.1
CVE-2026-32528

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in don-themes Riode riode allows Reflected XSS.Thi…

Mitigation only
Fix from $1,950 2026-03-25
Unclassified HIGH 7.1
CVE-2026-32529

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in don-themes Molla molla allows Reflected XSS.Thi…

Mitigation only
Fix from $1,950 2026-03-25
Unclassified HIGH 7.1
CVE-2026-32532

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in ThemeHunk Contact Form & Lead Form Elementor Bu…

Mitigation only
Fix from $1,950 2026-03-25
Unclassified HIGH 7.1
CVE-2026-32526

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in VillaTheme Abandoned Cart Recovery for WooComme…

Mitigation only
Fix from $1,950 2026-03-25
Unclassified HIGH 7.1
CVE-2026-32517

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Kleor Contact Manager contact-manager allows Re…

Mitigation only
Fix from $1,950 2026-03-25
Unclassified HIGH 7.1
CVE-2026-32518

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in imithemes Gaea gaea allows Reflected XSS.This i…

Mitigation only
Fix from $1,950 2026-03-25
Unclassified MEDIUM 6.5
CVE-2026-32521

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Northern Beaches Websites WP Custom Admin Inter…

Mitigation only
Fix from $1,600 2026-03-25
Unclassified HIGH 7.1
CVE-2026-32494

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Ays Pro Image Slider by Ays ays-slider allows E…

Mitigation only
Fix from $1,950 2026-03-25
Unclassified MEDIUM 6.5
CVE-2026-32490

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in jgwhite33 WP TripAdvisor Review Slider wp-tripa…

Mitigation only
Fix from $1,600 2026-03-25
Unclassified MEDIUM 6.5
CVE-2026-32491

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in jgwhite33 WP Review Slider wp-facebook-reviews …

Mitigation only
Fix from $1,600 2026-03-25
Unclassified HIGH 7.1
CVE-2026-32493

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in eyecix JobSearch wp-jobsearch allows Reflected …

Mitigation only
Fix from $1,950 2026-03-25
GitLab MEDIUM 5.4
CVE-2026-2973

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 17.7 before 18.8.7, 18.9 before 18.9.3, and 18.10 before 18.10.1 that coul…

Fix: 18.8.7 / 18.9.3+
Fix from $1,600 2026-03-25
GitLab MEDIUM 5.4
CVE-2026-2995

GitLab has remediated an issue in GitLab EE affecting all versions from 15.4 before 18.8.7, 18.9 before 18.9.3, and 18.10 before 18.10.1 that could h…

Fix: 18.8.7 / 18.9.3+
Fix from $1,600 2026-03-25
Unclassified MEDIUM 6.5
CVE-2026-31914

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in hookandhook WP Courses LMS wp-courses allows DO…

Mitigation only
Fix from $1,600 2026-03-25
Unclassified HIGH 7.1
CVE-2026-27087

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in G5Theme Wolverine Framework wolverine-framework…

Mitigation only
Fix from $1,950 2026-03-25
Unclassified HIGH 7.1
CVE-2026-27088

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in G5Theme Darna Framework darna-framework allows …

Mitigation only
Fix from $1,950 2026-03-25
Unclassified HIGH 7.1
CVE-2026-27054

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in PenciDesign Penci Soledad Data Migrator penci-d…

Mitigation only
Fix from $1,950 2026-03-25
Unclassified HIGH 7.1
CVE-2026-25461

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in purethemes Listeo Core listeo-core allows Refle…

No fix yet
Fix from $1,950 2026-03-25
Unclassified MEDIUM 6.5
CVE-2026-25465

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in codepeople CP Multi View Event Calendar cp-mul…

Mitigation only
Fix from $1,600 2026-03-25
Unclassified HIGH 7.1
CVE-2026-25452

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WPDO Remoji remoji allows Stored XSS.This issue…

Mitigation only
Fix from $1,950 2026-03-25
Unclassified MEDIUM 6.5
CVE-2026-25417

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Metagauss ProfileGrid profilegrid-user-profile…

Mitigation only
Fix from $1,600 2026-03-25
Unclassified HIGH 7.1
CVE-2026-25435

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in wpdevart Booking calendar, Appointment Booking …

Mitigation only
Fix from $1,950 2026-03-25
Unclassified HIGH 7.1
CVE-2026-25383

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Iqonic Design KiviCare kivicare-clinic-manageme…

Mitigation only
Fix from $1,950 2026-03-25
Unclassified HIGH 7.1
CVE-2026-25361

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in magepeopleteam WpEvently mage-eventpress allows…

Mitigation only
Fix from $1,950 2026-03-25