Alta · CVSS 7.1
NVDCVE-2026-97289
Unauthenticated Cross Site Scripting (XSS) in Quiz And Survey Master <= 11.2.6 versions.
1208 alertas em altas, exibindo 331–360.
Alta · CVSS 7.1
NVDCVE-2026-97272
Unauthenticated Cross Site Scripting (XSS) in Premmerce Permalink Manager for WooCommerce <= 2.3.13 versions.
Alta · CVSS 7.1
NVDCVE-2026-97271
Unauthenticated Cross Site Scripting (XSS) in WPFunnels <= 3.13.1 versions.
Alta · CVSS 7.1
NVDCVE-2026-97253
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Kreatura LayerSlider allows Reflected XSS. This issue affects LayerSlider: from n/a through 8.4.0.
Alta · CVSS 7.1
NVDCVE-2026-97250
Unauthenticated Cross Site Scripting (XSS) in Geo Mashup <= 1.13.21 versions.
Alta · CVSS 7.1
NVDCVE-2026-97237
Unauthenticated Cross Site Scripting (XSS) in JetEngine <= 3.8.14.3 versions.
Alta · CVSS 7.1
NVDCVE-2026-97235
Unauthenticated Cross Site Scripting (XSS) in ThemeREX Addons < 2.45.0 versions.
Alta · CVSS 7.1
NVDCVE-2026-97077
Unauthenticated Cross Site Scripting (XSS) in Ad Inserter <= 2.8.18 versions.
Alta · CVSS 7.1
NVDCVE-2026-97065
Unauthenticated Cross Site Scripting (XSS) in Happyforms <= 1.26.15 versions.
Alta · CVSS 7.1
NVDCVE-2026-96836
Unauthenticated Cross Site Scripting (XSS) in Parsi Date <= 6.3 versions.
Alta · CVSS 7.1
NVDCVE-2026-96830
Unauthenticated Cross Site Scripting (XSS) in GiveWP <= 4.16.9 versions.
Alta · CVSS 7.1
NVDCVE-2026-96820
Subscriber Cross Site Scripting (XSS) in Awesome Support <= 6.3.9 versions.
Alta · CVSS 7.1
NVDCVE-2026-96819
Subscriber Cross Site Scripting (XSS) in oik <= 4.15.4 versions.
Alta · CVSS 7.1
NVDCVE-2026-96816
Unauthenticated Cross Site Scripting (XSS) in Trusted Shops Easy Integration for WooCommerce <= 2.0.6 versions.
Alta · CVSS 7.1
NVDCVE-2026-96814
Unauthenticated Cross Site Scripting (XSS) in WooCommerce Product Table Lite <= 5.6.7 versions.
Alta · CVSS 7.1
NVDCVE-2026-96352
Unauthenticated Cross Site Scripting (XSS) in YITH WooCommerce Ajax Search <= 2.28.0 versions.
Alta · CVSS 7.1
NVDCVE-2026-96351
Unauthenticated Cross Site Scripting (XSS) in Classified Listing <= 6.1.3 versions.
Alta · CVSS 7.1
NVDCVE-2026-94499
Subscriber Broken Access Control in FormGent <= 1.12.2 versions.
Alta · CVSS 7.1
NVDCVE-2026-94081
Unauthenticated Cross Site Scripting (XSS) in WordPress Persistent Login <= 3.1.3 versions.
Alta · CVSS 7.1
NVDCVE-2026-94078
Unauthenticated Cross Site Scripting (XSS) in Site Reviews <= 8.3.1 versions.
Alta · CVSS 7.1
NVDCVE-2026-93770
Unauthenticated Cross Site Scripting (XSS) in WP Statistics <= 14.16.13 versions.
Alta · CVSS 7.1
NVDCVE-2026-93514
Unauthenticated Cross Site Scripting (XSS) in Notification for Telegram <= 3.5.2 versions.
Alta · CVSS 7.1
NVDCVE-2026-93512
Unauthenticated Cross Site Scripting (XSS) in JW Player for WordPress <= 2.3.11 versions.
Alta · CVSS 7.1
NVDCVE-2026-27371
Unauthenticated Cross Site Scripting (XSS) in WPFunnels <= 3.13.1 versions.
Alta · CVSS 7.1
NVDCVE-2026-102398
Unauthenticated Cross Site Scripting (XSS) in Popup by Supsystic <= 1.13.1 versions.
Alta · CVSS 7.1
NVDCVE-2026-102396
Unauthenticated Cross Site Scripting (XSS) in Ultimate Maps by Supsystic <= 1.5.5 versions.
Alta · CVSS 7.1
NVDCVE-2026-102395
Unauthenticated Cross Site Scripting (XSS) in Easy Google Maps <= 1.14.6 versions.
Alta · CVSS 7.1
NVDCVE-2026-102385
Unauthenticated Cross Site Scripting (XSS) in Ninja Forms <= 3.15.3 versions.
Alta · CVSS 7.1
NVDCVE-2026-100507
Unauthenticated Cross Site Scripting (XSS) in If-So Dynamic Content Personalization <= 1.10.1 versions.
Alta · CVSS 7.1
NVDCVE-2026-103242
A heap-based buffer overflow flaw was found in rpm. RPMTAG_FILESIGNATURES in a crafted, unsigned RPM package's main header is declared with the wrong header type, causing hex2binv() to allocate a one-byte buffer and then write the tag's attacker-controlled, hex-decoded content — of attacker-chosen length — past the...