Browse CVEs

HIGH 7.1 CVE-2026-25373 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in ProgressionStudios Vayvo vayvo-progression allo… Mitigation only Fix from $1,9502026-03-25 HIGH 7.1 CVE-2026-25376 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in eyecix Addon Jobsearch Chat addon-jobsearch-cha… Mitigation only Fix from $1,9502026-03-25 HIGH 7.1 CVE-2026-25352 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in skygroup MyDecor mydecor allows Reflected XSS.T… Mitigation only Fix from $1,9502026-03-25 HIGH 7.1 CVE-2026-25353 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in skygroup Nooni nooni allows Reflected XSS.This … Mitigation only Fix from $1,9502026-03-25 HIGH 7.1 CVE-2026-25354 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in skygroup Reebox reebox allows Reflected XSS.Thi… Mitigation only Fix from $1,9502026-03-25 MEDIUM 6.5 CVE-2026-25355 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in skygroup Sanzo sanzo allows Stored XSS.This iss… Mitigation only Fix from $1,6002026-03-25 HIGH 7.1 CVE-2026-25356 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in skygroup Yobazar yobazar allows Reflected XSS.T… Mitigation only Fix from $1,9502026-03-25 HIGH 7.1 CVE-2026-25346 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Ays Pro FAQ Builder AYS faq-builder-ays allows … Mitigation only Fix from $1,9502026-03-25 HIGH 7.1 CVE-2026-25347 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Acato WP REST Cache wp-rest-cache allows Stored… Mitigation only Fix from $1,9502026-03-25 HIGH 7.1 CVE-2026-25349 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in skygroup Loobek loobek allows Reflected XSS.Thi… Mitigation only Fix from $1,9502026-03-25 HIGH 7.1 CVE-2026-25350 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in skygroup Miti miti allows Reflected XSS.This is… Mitigation only Fix from $1,9502026-03-25 HIGH 7.1 CVE-2026-25351 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in skygroup MyMedi mymedi allows Reflected XSS.Thi… Mitigation only Fix from $1,9502026-03-25 HIGH 7.1 CVE-2026-25341 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in RSJoomla! RSFirewall! rsfirewall allows Stored … Mitigation only Fix from $1,9502026-03-25 HIGH 7.1 CVE-2026-25342 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in kutethemes Boutique kute-boutique allows Reflec… Mitigation only Fix from $1,9502026-03-25 HIGH 7.1 CVE-2026-25033 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in uixthemes Motta Addons motta-addons allows Refl… Mitigation only Fix from $1,9502026-03-25 HIGH 7.1 CVE-2026-25304 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in skygroup Jaroti jaroti allows Reflected XSS.Thi… Mitigation only Fix from $1,9502026-03-25 HIGH 7.1 CVE-2026-25306 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in 8theme XStore Core et-core-plugin allows Reflec… Mitigation only Fix from $1,9502026-03-25 HIGH 7.1 CVE-2026-25018 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in stmcan NaturaLife Extensions naturalife-extensi… Mitigation only Fix from $1,9502026-03-25 HIGH 7.1 CVE-2026-25025 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in e4jvikwp VikRestaurants vikrestaurants allows R… Mitigation only Fix from $1,9502026-03-25 HIGH 7.1 CVE-2026-25013 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WHMCSdes Phox Hosting phox-host allows Reflecte… Mitigation only Fix from $1,9502026-03-25 HIGH 7.1 CVE-2026-24979 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in NooTheme Jobica Core jobica-core allows Reflect… Mitigation only Fix from $1,9502026-03-25 HIGH 7.1 CVE-2026-24980 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in NooTheme Visionary Core noo-visionary-core allo… Mitigation only Fix from $1,9502026-03-25 HIGH 7.1 CVE-2026-24983 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in UpSolution UpSolution Core us-core allows Refle… Mitigation only Fix from $1,9502026-03-25 HIGH 7.1 CVE-2026-24973 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in NooTheme CitiLights noo-citilights allows Refle… Mitigation only Fix from $1,9502026-03-25 HIGH 7.1 CVE-2026-24975 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in NooTheme Organici Library noo-organici-library … Mitigation only Fix from $1,9502026-03-25 HIGH 7.1 CVE-2026-24391 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in ThemeMakers Car Dealer cardealer allows Reflect… Mitigation only Fix from $1,9502026-03-25 MEDIUM 6.5 CVE-2026-24370 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Theme-one The Grid the-grid allows Stored XSS.T… Mitigation only Fix from $1,6002026-03-25 HIGH 7.1 CVE-2026-23807 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WP Socio WP Telegram Widget and Join Link wptel… Mitigation only Fix from $1,9502026-03-25 HIGH 7.1 CVE-2026-23973 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in uxper Golo golo allows Reflected XSS.This issue… Mitigation only Fix from $1,9502026-03-25 HIGH 7.1 CVE-2026-23979 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Softwebmedia Gyan Elements gyan-elements allows… Mitigation only Fix from $1,9502026-03-25