CWE-79
High likelihoodImproper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.
45,771 vulnerabilities with CWE-79
CVE-2026-57708
HIGH
WordPress Contact Form Entries plugin <= 1.5.2 - Cross Site Scripting (XSS) vulnerability
CVSS 7.1
CVE-2026-57706
HIGH
WordPress Dokan plugin <= 5.0.6 - Cross Site Scripting (XSS) vulnerability
CVSS 7.1
CVE-2026-57695
HIGH
WordPress Document Gallery plugin <= 5.1.0 - Cross Site Scripting (XSS) vulnerability
CVSS 7.1
CVE-2026-57693
MEDIUM
WordPress Ad Inserter plugin <= 2.8.11 - Cross Site Scripting (XSS) vulnerability
CVSS 6.5
CVE-2026-57691
MEDIUM
WordPress Anti-Malware Security and Brute-Force Firewall plugin <= 4.23.89 - Cross Site Scripting (XSS) vulnerability
CVSS 5.8
CVE-2026-57668
HIGH
WordPress NEX-Forms plugin <= 9.2.2 - Cross Site Scripting (XSS) vulnerability
CVSS 7.1
CVE-2026-57423
HIGH
WordPress Message Filter for Contact Form 7 plugin <= 1.6.3.8 - Reflected Cross Site Scripting (XSS) vulnerability
CVSS 7.1
CVE-2026-57422
HIGH
WordPress Bopo – WooCommerce Product Bundle Builder plugin <= 1.2.0 - Reflected Cross Site Scripting (XSS) vulnerability
CVSS 7.1
CVE-2026-57421
HIGH
WordPress CRM Perks Forms plugin <= 1.1.7 - Cross Site Scripting (XSS) vulnerability
CVSS 7.1
CVE-2026-57420
MEDIUM
WordPress Author Box WP Lens plugin <= 2.1.5 - Cross Site Scripting (XSS) vulnerability
CVSS 6.5
CVE-2026-57417
HIGH
WordPress Cart Lift plugin <= 3.1.57 - Cross Site Scripting (XSS) vulnerability
CVSS 7.1
CVE-2026-57416
HIGH
WordPress SiteGround Email Marketing plugin <= 1.7.5 - Cross Site Scripting (XSS) vulnerability
CVSS 7.1
CVE-2026-57415
HIGH
WordPress Gift Vouchers plugin <= 4.7.0 - Cross Site Scripting (XSS) vulnerability
CVSS 7.1
CVE-2026-57414
MEDIUM
WordPress ChatBot for eCommerce – WoowBot plugin <= 4.6.1 - Cross Site Scripting (XSS) vulnerability
CVSS 6.5
CVE-2026-57411
HIGH
WordPress CF7 Views – Complete Entry Management for Contact Form 7 plugin <= 3.2.2 - Cross Site Scripting (XSS) vulnerability
CVSS 7.1
CVE-2026-57409
HIGH
WordPress Active Products Tables for WooCommerce plugin <= 1.1.0 - Cross Site Scripting (XSS) vulnerability
CVSS 7.1
CVE-2026-57403
HIGH
WordPress GD Security Headers plugin <= 1.8 - Cross Site Scripting (XSS) vulnerability
CVSS 7.1
CVE-2026-57402
MEDIUM
WordPress Flexible Refund and Return Order for WooCommerce plugin <= 1.0.51 - Cross Site Scripting (XSS) vulnerability
CVSS 6.5
CVE-2026-57399
HIGH
WordPress Proxy & VPN Blocker plugin <= 3.5.8 - Cross Site Scripting (XSS) vulnerability
CVSS 7.1
CVE-2026-57398
HIGH
WordPress Real Estate Manager Pro plugin <= 12.8.3 - Cross Site Scripting (XSS) vulnerability
CVSS 7.1
CVE-2026-57396
HIGH
WordPress Free Gifts for WooCommerce plugin <= 13.1.0 - Cross Site Scripting (XSS) vulnerability
CVSS 7.1
CVE-2026-57394
HIGH
WordPress Newsletters plugin <= 4.14 - Cross Site Scripting (XSS) vulnerability
CVSS 7.1
CVE-2026-57391
MEDIUM
WordPress Loops & Logic plugin <= 4.2.3 - Cross Site Scripting (XSS) vulnerability
CVSS 6.5
CVE-2026-57388
HIGH
WordPress Hydra Booking plugin <= 1.1.44 - Cross Site Scripting (XSS) vulnerability
CVSS 7.1
CVE-2026-57387
HIGH
WordPress picu plugin <= 3.5.1 - Cross Site Scripting (XSS) vulnerability
CVSS 7.1
Details
Vulnerabilities
45,771
Exploit Likelihood
High