VulnSea

CWE-79

CVEs classified under CWE-79, newest first.

5595 CVEsRSS

CVE-2026-94077Medium· 6.5
1mo ago

Contributor Cross Site Scripting (XSS) in Safe SVG <= 2.5.0 versions.

Contributor Cross Site Scripting (XSS) in Safe SVG <= 2.5.0 versions.

▾ Sunlit10up · safe-svgEPSS 0.17%via NVD
CVE-2026-94081High· 7.1
1mo ago

Unauthenticated Cross Site Scripting (XSS) in WordPress Persistent Login <= 3.1.3 versions.

Unauthenticated Cross Site Scripting (XSS) in WordPress Persistent Login <= 3.1.3 versions.

▾ Twilightlukeseager · wp-persistent-loginEPSS 0.18%via NVD
CVE-2026-94674Medium· 6.5
1mo ago

Contributor Cross Site Scripting (XSS) in Pixel Manager for WooCommerce <= 1.69.0 versions.

Contributor Cross Site Scripting (XSS) in Pixel Manager for WooCommerce <= 1.69.0 versions.

▾ SunlitSweetCode · woocommerce-google-adwords-conversion-tracking-tagEPSS 0.16%via NVD
CVE-2026-96338Medium· 6.5
1mo ago

Subscriber Cross Site Scripting (XSS) in Profile Builder <= 4.0.2 versions.

Subscriber Cross Site Scripting (XSS) in Profile Builder <= 4.0.2 versions.

▾ SunlitCozmoslabs · profile-builderEPSS 0.21%via NVD
CVE-2026-96351High· 7.1
1mo ago

Unauthenticated Cross Site Scripting (XSS) in Classified Listing <= 6.1.3 versions.

Unauthenticated Cross Site Scripting (XSS) in Classified Listing <= 6.1.3 versions.

▾ TwilightRadiusTheme · classified-listingEPSS 0.18%via NVD
CVE-2026-96814High· 7.1
1mo ago

Unauthenticated Cross Site Scripting (XSS) in WooCommerce Product Table Lite <= 5.6.7 versions.

Unauthenticated Cross Site Scripting (XSS) in WooCommerce Product Table Lite <= 5.6.7 versions.

▾ TwilightWP Titan Labs · wc-product-table-liteEPSS 0.18%via NVD
CVE-2026-96352High· 7.1
1mo ago

Unauthenticated Cross Site Scripting (XSS) in YITH WooCommerce Ajax Search <= 2.28.0 versions.

Unauthenticated Cross Site Scripting (XSS) in YITH WooCommerce Ajax Search <= 2.28.0 versions.

▾ TwilightYITHEMES · yith-woocommerce-ajax-searchEPSS 0.18%via NVD
CVE-2026-96816High· 7.1
1mo ago

Unauthenticated Cross Site Scripting (XSS) in Trusted Shops Easy Integration for WooCommerce <= 2.0.6 versions.

Unauthenticated Cross Site Scripting (XSS) in Trusted Shops Easy Integration for WooCommerce <= 2.0.6 versions.

▾ Twilightvendidero · trusted-shops-easy-integration-for-woocommerceEPSS 0.18%via NVD
CVE-2026-96820High· 7.1
1mo ago

Subscriber Cross Site Scripting (XSS) in Awesome Support <= 6.3.9 versions.

Subscriber Cross Site Scripting (XSS) in Awesome Support <= 6.3.9 versions.

▾ Twilightawesomesupport · awesome-supportEPSS 0.23%via NVD
CVE-2026-96819High· 7.1
1mo ago

Subscriber Cross Site Scripting (XSS) in oik <= 4.15.4 versions.

Subscriber Cross Site Scripting (XSS) in oik <= 4.15.4 versions.

▾ Twilightbobbingwide · oikEPSS 0.23%via NVD
CVE-2026-96829Medium· 6.5
1mo ago

Contributor Cross Site Scripting (XSS) in The Plus Addons for Elementor Page Builder Lite <= 6.5.1 versions.

Contributor Cross Site Scripting (XSS) in The Plus Addons for Elementor Page Builder Lite <= 6.5.1 versions.

▾ SunlitPOSIMYTH · the-plus-addons-for-elementor-page-builderEPSS 0.17%via NVD
CVE-2026-96830High· 7.1
1mo ago

Unauthenticated Cross Site Scripting (XSS) in GiveWP <= 4.16.9 versions.

Unauthenticated Cross Site Scripting (XSS) in GiveWP <= 4.16.9 versions.

▾ TwilightNexcess · giveEPSS 0.19%via NVD
CVE-2026-96836High· 7.1
1mo ago

Unauthenticated Cross Site Scripting (XSS) in Parsi Date <= 6.3 versions.

Unauthenticated Cross Site Scripting (XSS) in Parsi Date <= 6.3 versions.

▾ TwilightMorteza Geransayeh · wp-parsidateEPSS 0.19%via NVD
CVE-2026-96835Medium· 6.5
1mo ago

Contributor Cross Site Scripting (XSS) in King Addons for Elementor <= 51.1.85 versions.

Contributor Cross Site Scripting (XSS) in King Addons for Elementor <= 51.1.85 versions.

▾ SunlitKingAddons.com · king-addonsEPSS 0.16%via NVD
CVE-2026-97067Medium· 6.5
1mo ago

Contributor Cross Site Scripting (XSS) in EWWW Image Optimizer <= 8.7.7 versions.

Contributor Cross Site Scripting (XSS) in EWWW Image Optimizer <= 8.7.7 versions.

▾ SunlitShane Bishop · ewww-image-optimizerEPSS 0.17%via NVD
CVE-2026-97065High· 7.1
1mo ago

Unauthenticated Cross Site Scripting (XSS) in Happyforms <= 1.26.15 versions.

Unauthenticated Cross Site Scripting (XSS) in Happyforms <= 1.26.15 versions.

▾ TwilightHappyforms · happyformsEPSS 0.18%via NVD
CVE-2026-97077High· 7.1
1mo ago

Unauthenticated Cross Site Scripting (XSS) in Ad Inserter <= 2.8.18 versions.

Unauthenticated Cross Site Scripting (XSS) in Ad Inserter <= 2.8.18 versions.

▾ TwilightSpacetime · ad-inserterEPSS 0.19%via NVD
CVE-2026-97266Medium· 6.5
1mo ago

Contributor Cross Site Scripting (XSS) in Virtue/Ascend/Pinnacle Toolkit <= 4.9.12.1 versions.

Contributor Cross Site Scripting (XSS) in Virtue/Ascend/Pinnacle Toolkit <= 4.9.12.1 versions.

▾ SunlitNexcess · virtue-toolkitEPSS 0.13%via NVD
CVE-2026-97262Medium· 6.5
1mo ago

Contributor Cross Site Scripting (XSS) in Visual Composer Website Builder <= 45.16.2 versions.

Contributor Cross Site Scripting (XSS) in Visual Composer Website Builder <= 45.16.2 versions.

▾ SunlitVisual Composer · visualcomposerEPSS 0.13%via NVD
CVE-2026-97250High· 7.1
1mo ago

Unauthenticated Cross Site Scripting (XSS) in Geo Mashup <= 1.13.21 versions.

Unauthenticated Cross Site Scripting (XSS) in Geo Mashup <= 1.13.21 versions.

▾ TwilightDylan Kuhn · geo-mashupEPSS 0.14%via NVD
CVE-2026-97270Medium· 6.5
1mo ago

Subscriber Cross Site Scripting (XSS) in CMB2 <= 2.13.0 versions.

Subscriber Cross Site Scripting (XSS) in CMB2 <= 2.13.0 versions.

▾ SunlitJustin Sternberg · cmb2EPSS 0.17%via NVD
CVE-2026-97272High· 7.1
1mo ago

Unauthenticated Cross Site Scripting (XSS) in Premmerce Permalink Manager for WooCommerce <= 2.3.13 versions.

Unauthenticated Cross Site Scripting (XSS) in Premmerce Permalink Manager for WooCommerce <= 2.3.13 versions.

▾ TwilightPremmerce · woo-permalink-managerEPSS 0.14%via NVD
CVE-2026-97271High· 7.1
1mo ago

Unauthenticated Cross Site Scripting (XSS) in WPFunnels <= 3.13.1 versions.

Unauthenticated Cross Site Scripting (XSS) in WPFunnels <= 3.13.1 versions.

▾ TwilightWPFunnels · wpfunnelsEPSS 0.14%via NVD
CVE-2026-97279Medium· 6.5
1mo ago

Contributor Cross Site Scripting (XSS) in Polylang <= 3.8.9 versions.

Contributor Cross Site Scripting (XSS) in Polylang <= 3.8.9 versions.

▾ SunlitChouby · polylangEPSS 0.15%via NVD
CVE-2026-97289High· 7.1
1mo ago

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in ExpressTech Quiz And Survey Master quiz-master-next allows DOM-Based XSS.This issue affects Quiz And Survey Master: from n/a through 11…

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in ExpressTech Quiz And Survey Master quiz-master-next allows DOM-Based XSS.This issue affects Quiz And Survey Master: from n/a through 11…

▾ TwilightExpressTech Systems · quiz-master-nextEPSS 0.14%via NVD
CVE-2026-97286Medium· 6.5PoC
1mo ago

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WP Chill Strong Testimonials strong-testimonials allows Stored XSS.This issue affects Strong Testimonials: from n/a through 3.3.11.

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WP Chill Strong Testimonials strong-testimonials allows Stored XSS.This issue affects Strong Testimonials: from n/a through 3.3.11.

▾ TwilightWP Chill · strong-testimonialsEPSS 0.18%via NVD
CVE-2026-97288Medium· 6.5
1mo ago

Contributor Cross Site Scripting (XSS) in OAuth Server <= 4.5.1 versions.

Contributor Cross Site Scripting (XSS) in OAuth Server <= 4.5.1 versions.

▾ SunlitJayson T Cote · oauth2-providerEPSS 0.13%via NVD
CVE-2026-97292Medium· 6.5
1mo ago

Author Cross Site Scripting (XSS) in YITH WooCommerce Tab Manager <= 2.15.0 versions.

Author Cross Site Scripting (XSS) in YITH WooCommerce Tab Manager <= 2.15.0 versions.

▾ SunlitYITHEMES · yith-woocommerce-tab-managerEPSS 0.13%via NVD
CVE-2026-97298Medium· 6.5
1mo ago

Contributor Cross Site Scripting (XSS) in King Addons for Elementor <= 51.1.86 versions.

Contributor Cross Site Scripting (XSS) in King Addons for Elementor <= 51.1.86 versions.

▾ SunlitKingAddons · king-addonsEPSS 0.13%via NVD
CVE-2026-97301Medium· 6.5
1mo ago

Contributor Cross Site Scripting (XSS) in Cool Formkit Lite <= 2.7.8 versions.

Contributor Cross Site Scripting (XSS) in Cool Formkit Lite <= 2.7.8 versions.

▾ SunlitCool Plugins · extensions-for-elementor-formEPSS 0.17%via NVD
CWE-79 vulnerabilities (CVEs) — page 59 · VulnSea