共收录 5426 条相关情报。
← 返回所有主题CVE-2026-90981
The Newsletter – Send awesome emails from WordPress plugin for WordPress is vulnerable to Reflected Cross-Site Scripting
CVE-2026-67103
HCL BigFix Service Management is affected by Cross-Site Scripting (XSS) vulnerability, which could allow an attacker to
CVE-2026-17586
The VK All in One Expansion Unit plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'vkExUnit_cta_img
CVE-2026-15004
The FileBird – WordPress Media Library Folders & File Manager plugin for WordPress is vulnerable to Stored Cross-Site Sc
CVE-2026-14472
The Kubio AI Page Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via kubio/copyright Block Co
CVE-2026-11757
Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in KA Informatics Tec
CVE-2026-92561
The Booking Calendar plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'options' parameter in
CVE-2026-89330
The EmbedPress – PDF Embedder, 3D PDF FlipBook, Google Reviews, YouTube Videos, Upload & Embed PDF documents plugin for
CVE-2026-84909
The Custom Twitter Feeds – A Tweets Widget or X Feed Widget plugin for WordPress is vulnerable to Stored Cross-Site Scri
CVE-2026-75016
The Magazine Blocks plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the News Ticker block's client
CVE-2024-27123
A cross-site scripting (XSS) vulnerability has been reported to affect QcalAgent. The local attackers can then exploit t
CVE-2026-93485
Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in Automattic WordPre
CVE-2026-88993
The All Bootstrap Blocks WordPress plugin through 1.3.31 does not properly escape a block attribute before outputting it
CVE-2026-88825
The iGMS Direct Booking WordPress plugin before 2.0 does not authorise or escape its widget appearance settings, allowin
CVE-2026-85127
The VikBooking Hotel Booking Engine & PMS WordPress plugin before 1.8.15 does not restrict the type of files unauthentic
CVE-2026-85122
The Easy Form Builder by WhiteStudio WordPress plugin before 4.2.0 does not validate a submitted value against the stor
CVE-2026-84902
The King Addons for Elementor WordPress plugin before 51.1.81 does not perform an object-level authorization check when
CVE-2026-14855
The RT Mega Menu plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'css[left]' parameter in all
CVE-2026-92991
The Biggop Library is vulnerable to Cross-Site Scripting via the ‘display_id’ parameter from the Sigmative API in variou
CVE-2026-15650
The RT Mega Menu – Mega Menu Builder for Elementor & Gutenberg plugin for WordPress is vulnerable to Stored Cross-Site S