Browse CVEs

MEDIUM 6.5 CVE-2026-65518 Contributor Cross Site Scripting (XSS) in Accept Donations with PayPal & Stripe <= 1.5.5 versions. No fix yet Fix from $1,6002026-07-23 MEDIUM 6.5 CVE-2026-65519 Author Cross Site Scripting (XSS) in Photo Gallery <= 2.7.7.29 versions. No fix yet Fix from $1,6002026-07-23 MEDIUM 6.5 CVE-2026-65503 Contributor Cross Site Scripting (XSS) in Ultimate Store Kit Elementor Addons <= 3.0.5 versions. No fix yet Fix from $1,6002026-07-23 HIGH 7.1 CVE-2026-65492 Unauthenticated Cross Site Scripting (XSS) in Dokan Pro <= 5.0.0 versions. No fix yet Fix from $1,9502026-07-23 MEDIUM 6.5 CVE-2026-65482 Contributor Cross Site Scripting (XSS) in LA-Studio Element Kit for Elementor <= 1.6.2 versions. No fix yet Fix from $1,6002026-07-23 MEDIUM 5.9 CVE-2026-65483 Author Cross Site Scripting (XSS) in HashThemes Demo Importer <= 1.4.2 versions. No fix yet Fix from $1,6002026-07-23 MEDIUM 6.5 CVE-2026-65473 Contributor Cross Site Scripting (XSS) in Virtue/Ascend/Pinnacle Toolkit <= 4.9.12 versions. No fix yet Fix from $1,6002026-07-23 MEDIUM 6.5 CVE-2026-65475 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WP Chill Modula Image Gallery allows Stored XSS… No fix yet Fix from $1,6002026-07-23 MEDIUM 6.5 CVE-2026-65480 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in CodexThemes TheGem allows DOM-Based XSS. This … No fix yet Fix from $1,6002026-07-23 MEDIUM 6.5 CVE-2026-65465 Contributor Cross Site Scripting (XSS) in JetElements For Elementor <= 2.9.1.1 versions. No fix yet Fix from $1,6002026-07-23 MEDIUM 6.5 CVE-2026-65470 Contributor Cross Site Scripting (XSS) in Fluent Support <= 2.3.0 versions. No fix yet Fix from $1,6002026-07-23 MEDIUM 6.5 CVE-2026-65449 Contributor Cross Site Scripting (XSS) in MapSVG <= 8.14.0 versions. No fix yet Fix from $1,6002026-07-23 MEDIUM 6.1 CVE-2026-64810 In JetBrains IntelliJ IDEA before 2026.2 hTML injection was possible in an IDE notification, allowing silent user activity tracking Intellij Idea 2026.2+ Fix from $1,6002026-07-23 HIGH 7.1 CVE-2026-61944 Unauthenticated Cross Site Scripting (XSS) in Bookly <= 27.7 versions. No fix yet Fix from $1,9502026-07-23 HIGH 7.1 CVE-2026-61947 Unauthenticated Cross Site Scripting (XSS) in Form Vibes – Database Manager for Forms <= 1.5.2 versions. No fix yet Fix from $1,9502026-07-23 HIGH 7.1 CVE-2026-59517 Unauthenticated Cross Site Scripting (XSS) in Easy Form Builder <= 4.0.12 versions. No fix yet Fix from $1,9502026-07-23 HIGH 7.1 CVE-2026-59512 Unauthenticated Cross Site Scripting (XSS) in Product Enquiry for WooCommerce <= 2.2.34.43 versions. No fix yet Fix from $1,9502026-07-23 MEDIUM 6.5 CVE-2026-59513 Subscriber Cross Site Scripting (XSS) in Masteriyo - LMS <= 2.3.0 versions. No fix yet Fix from $1,6002026-07-23 HIGH 7.1 CVE-2026-57735 Unauthenticated Cross Site Scripting (XSS) in Breakdance <= 2.7.1 versions. No fix yet Fix from $1,9502026-07-23 HIGH 7.1 CVE-2026-57767 Unauthenticated Cross Site Scripting (XSS) in WP Google Maps Pro <= 10.1.02 versions. No fix yet Fix from $1,9502026-07-23 HIGH 7.1 CVE-2026-57769 Unauthenticated Cross Site Scripting (XSS) in Grand Photography <= 5.7.8 versions. No fix yet Fix from $1,9502026-07-23 HIGH 7.1 CVE-2026-57809 Unauthenticated Cross Site Scripting (XSS) in AffiliateWP <= 2.34.0 versions. No fix yet Fix from $1,9502026-07-23 HIGH 7.1 CVE-2026-57699 Subscriber Cross Site Scripting (XSS) in Slider Pro <= 4.8.13 versions. No fix yet Fix from $1,9502026-07-23 HIGH 7.1 CVE-2026-57701 Unauthenticated Cross Site Scripting (XSS) in Real Estate Manager Pro <= 12.8.5 versions. No fix yet Fix from $1,9502026-07-23 HIGH 7.1 CVE-2026-57704 Unauthenticated Cross Site Scripting (XSS) in Smart Manager <= 8.90.0 versions. No fix yet Fix from $1,9502026-07-23 HIGH 7.1 CVE-2026-57370 Unauthenticated Cross Site Scripting (XSS) in Visitor Traffic Real Time Statistics Pro <= 11.9.1 versions. No fix yet Fix from $1,9502026-07-23 MEDIUM 6.5 CVE-2026-57373 Customer Cross Site Scripting (XSS) in Funnel Kit Funnel Builder PRO <= 3.15.0.4 versions. No fix yet Fix from $1,6002026-07-23 HIGH 7.1 CVE-2026-57374 Unauthenticated Cross Site Scripting (XSS) in Funnel Kit Funnel Builder PRO <= 3.15.0.7 versions. No fix yet Fix from $1,9502026-07-23 MEDIUM 6.5 CVE-2026-57384 Subscriber Cross Site Scripting (XSS) in WishList Member X <= 3.32.0 versions. No fix yet Fix from $1,6002026-07-23 HIGH 7.1 CVE-2026-57397 Unauthenticated Cross Site Scripting (XSS) in Coaching <= 3.9.2 versions. No fix yet Fix from $1,9502026-07-23