Top technology
Linux 13140
Google 12525
Microsoft 12378
Apple 6692
Oracle 6649
Adobe 6383
Ibm 6266
Cisco 5746
Debian 3919
Apache 2864
Mozilla 2857
Redhat 2581
Linux 13140
Google 12525
Microsoft 12378
Apple 6692
Oracle 6649
Adobe 6383
Ibm 6266
Cisco 5746
Debian 3919
Apache 2864
Mozilla 2857
Redhat 2581
MEDIUM 5.9
CVE-2026-73344
Author Cross Site Scripting (XSS) in WP Data Access <= 5.5.79 versions.
No fix yet
HIGH 7.1
CVE-2026-66697
Unauthenticated Cross Site Scripting (XSS) in Colissimo Officiel : Méthodes de livraison pour WooCommerce <= 2.10.0 versions.
No fix yet
HIGH 7.1
CVE-2026-66698
Unauthenticated Cross Site Scripting (XSS) in SureDash <= 1.10.1 versions.
No fix yet
HIGH 7.1
CVE-2026-66700
Unauthenticated Cross Site Scripting (XSS) in Smart Online Order for Clover <= 1.6.1 versions.
No fix yet
HIGH 7.1
CVE-2026-66655
Unauthenticated Cross Site Scripting (XSS) in MultiParcels Shipping For WooCommerce <= 1.30.36 versions.
No fix yet
MEDIUM 6.5
CVE-2026-66687
Customer Cross Site Scripting (XSS) in WpBookingly <= 1.3.2 versions.
No fix yet
MEDIUM 6.5
CVE-2026-66467
Subscriber Cross Site Scripting (XSS) in FluentCommunity <= 2.7.5 versions.
No fix yet
HIGH 7.1
CVE-2026-66468
Unauthenticated Cross Site Scripting (XSS) in Local Delivery Drivers for WooCommerce <= 3.0.0 versions.
No fix yet
MEDIUM 6.5
CVE-2026-66471
Subscriber Cross Site Scripting (XSS) in Accordion <= 3.0.6 versions.
No fix yet
MEDIUM 6.5
CVE-2026-66460
Subscriber Cross Site Scripting (XSS) in AfterShip Tracking <= 1.18.1 versions.
No fix yet
HIGH 7.1
CVE-2026-66449
Unauthenticated Cross Site Scripting (XSS) in Geo Mashup <= 1.13.18 versions.
No fix yet
MEDIUM 6.5
CVE-2026-66456
Subscriber Cross Site Scripting (XSS) in Profile Extra Fields by BestWebSoft <= 1.3.4 versions.
No fix yet
HIGH 7.1
CVE-2026-65580
Unauthenticated Cross Site Scripting (XSS) in Agrion <= 1.0.0 versions.
No fix yet
HIGH 7.1
CVE-2026-66426
Unauthenticated Cross Site Scripting (XSS) in WP-Stats <= 2.56 versions.
No fix yet
HIGH 7.1
CVE-2026-66429
Unauthenticated Cross Site Scripting (XSS) in Visitor Traffic Real Time Statistics Pro <= 11.10 versions.
No fix yet
HIGH 7.1
CVE-2026-61974
Unauthenticated Cross Site Scripting (XSS) in Mang Board WP <= 2.3.4 versions.
No fix yet
HIGH 7.1
CVE-2026-61960
Unauthenticated Cross Site Scripting (XSS) in WP Full Stripe Free <= 8.5.0 versions.
No fix yet
HIGH 7.1
CVE-2026-61965
Unauthenticated Cross Site Scripting (XSS) in GeekyBot <= 1.2.6 versions.
No fix yet
HIGH 7.1
CVE-2026-28187
Unauthenticated Cross Site Scripting (XSS) in Knowledge Base for Documentation, FAQs with AI Assistance <= 17.211.0 versions.
No fix yet
HIGH 7.1
CVE-2026-28170
Unauthenticated Cross Site Scripting (XSS) in Blog Floating Button <= 1.4.20 versions.
No fix yet
HIGH 7.1
CVE-2026-28175
Unauthenticated Cross Site Scripting (XSS) in Visitors Traffic Real Time Statistics <= 8.11 versions.
No fix yet
MEDIUM 6.5
CVE-2026-28182
Subscriber Cross Site Scripting (XSS) in AcyMailing SMTP Newsletter <= 10.11.1 versions.
No fix yet
HIGH 7.1
CVE-2026-28158
Unauthenticated Cross Site Scripting (XSS) in Do Lasso <= 358 versions.
No fix yet
HIGH 7.1
CVE-2026-28003
Unauthenticated Cross Site Scripting (XSS) in Maspik – Spam blacklist <= 2.9.1 versions.
No fix yet
HIGH 7.1
CVE-2026-28004
Unauthenticated Cross Site Scripting (XSS) in Business Directory <= 6.4.25 versions.
No fix yet
HIGH 7.1
CVE-2026-27536
Unauthenticated Cross Site Scripting (XSS) in MailChimp Subscribe Forms <= 4.3.3 versions.
No fix yet
MEDIUM 6.5
CVE-2026-27537
Unauthenticated Cross Site Scripting (XSS) in Popup by Supsystic <= 1.11.2 versions.
No fix yet
HIGH 7.1
CVE-2026-27539
Unauthenticated Cross Site Scripting (XSS) in Welcart e-Commerce <= 2.11.31 versions.
No fix yet
MEDIUM 5.1
CVE-2026-19716
Stored Cross-site Scripting (CWE-79) in the user management component in maalfer Pentestify before 1.1.1 allows an authenticated attacker to execute …
No fix yet
MEDIUM 6.1
CVE-2026-73628
Serendipity versions >= 2.3.5 and <= 2.6.0 contain a reflected cross-site scripting vulnerability in the search clean-URL route (/search/<term>). In …
No fix yet