CWE-79
High likelihoodImproper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.
45,759 vulnerabilities with CWE-79
CVE-2026-65480
MEDIUM
WordPress TheGem theme <= 5.11.1 - Cross Site Scripting (XSS) vulnerability
CVSS 6.5
CVE-2026-65475
MEDIUM
WordPress Modula Image Gallery plugin 2.14.25-2.14.30 - Cross Site Scripting (XSS) vulnerability
CVSS 6.5
CVE-2026-65473
MEDIUM
WordPress Virtue/Ascend/Pinnacle Toolkit plugin <= 4.9.12 - Cross Site Scripting (XSS) vulnerability
CVSS 6.5
CVE-2026-65470
MEDIUM
WordPress Fluent Support plugin <= 2.3.0 - Cross Site Scripting (XSS) vulnerability
CVSS 6.5
CVE-2026-65465
MEDIUM
WordPress JetElements For Elementor plugin <= 2.9.1.1 - Cross Site Scripting (XSS) vulnerability
CVSS 6.5
CVE-2026-65449
MEDIUM
WordPress MapSVG plugin <= 8.14.0 - Cross Site Scripting (XSS) vulnerability
CVSS 6.5
CVE-2026-64810
MEDIUM
Jetbrains IntelliJ Idea < 2026.2 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVSS 4.3
CVE-2026-61947
HIGH
WordPress Form Vibes – Database Manager for Forms plugin <= 1.5.2 - Cross Site Scripting (XSS) vulnerability
CVSS 7.1
CVE-2026-61944
HIGH
WordPress Bookly plugin <= 27.7 - Cross Site Scripting (XSS) vulnerability
CVSS 7.1
CVE-2026-59517
HIGH
WordPress Easy Form Builder plugin <= 4.0.12 - Cross Site Scripting (XSS) vulnerability
CVSS 7.1
CVE-2026-59513
MEDIUM
WordPress Masteriyo - LMS plugin <= 2.3.0 - Cross Site Scripting (XSS) vulnerability
CVSS 6.5
CVE-2026-59512
HIGH
WordPress Product Enquiry for WooCommerce plugin <= 2.2.34.43 - Cross Site Scripting (XSS) vulnerability
CVSS 7.1
CVE-2026-57809
HIGH
WordPress AffiliateWP plugin <= 2.34.0 - Reflected Cross Site Scripting (XSS) vulnerability
CVSS 7.1
CVE-2026-57769
HIGH
WordPress Grand Photography theme <= 5.7.8 - Reflected Cross Site Scripting (XSS) vulnerability
CVSS 7.1
CVE-2026-57767
HIGH
WordPress WP Google Maps Pro plugin <= 10.1.02 - Cross Site Scripting (XSS) vulnerability
CVSS 7.1
CVE-2026-57735
HIGH
WordPress Breakdance plugin <= 2.7.1 - Cross Site Scripting (XSS) vulnerability
CVSS 7.1
CVE-2026-57704
HIGH
WordPress Smart Manager plugin <= 8.90.0 - Cross Site Scripting (XSS) vulnerability
CVSS 7.1
CVE-2026-57701
HIGH
WordPress Real Estate Manager Pro plugin <= 12.8.5 - Reflected Cross Site Scripting (XSS) vulnerability
CVSS 7.1
CVE-2026-57699
HIGH
WordPress Slider Pro plugin <= 4.8.13 - Cross Site Scripting (XSS) vulnerability
CVSS 7.1
CVE-2026-57428
HIGH
WordPress Sprout Clients plugin <= 3.2.3 - Cross Site Scripting (XSS) vulnerability
CVSS 7.1
CVE-2026-57427
HIGH
WordPress Download Monitor - WPForms Lock plugin <= 1.0.4 - Cross Site Scripting (XSS) vulnerability
CVSS 7.1
CVE-2026-57397
HIGH
WordPress Coaching theme <= 3.9.2 - Cross Site Scripting (XSS) vulnerability
CVSS 7.1
CVE-2026-57384
MEDIUM
WordPress WishList Member X plugin <= 3.32.0 - Cross Site Scripting (XSS) vulnerability
CVSS 6.5
CVE-2026-57374
HIGH
WordPress Funnel Kit Funnel Builder PRO plugin <= 3.15.0.7 - Cross Site Scripting (XSS) vulnerability
CVSS 7.1
CVE-2026-57373
MEDIUM
WordPress Funnel Kit Funnel Builder PRO plugin <= 3.15.0.4 - Cross Site Scripting (XSS) vulnerability
CVSS 6.5
Details
Vulnerabilities
45,759
Exploit Likelihood
High