Search CVEs
Unified search with smart filters. Use vendor:apache, cwe:79, epss>=80, cvss>=9, kev:, poc: in your query.
Results for "cwe:79"
1,850 found
Export CSV
| CVE | Severity | CVSS | EPSS | Published | Flags | Description |
|---|---|---|---|---|---|---|
CVE-2026-42658 |
high | 7.1 | 0.0018 | 2026-06-15 | Unauthenticated Cross Site Scripting (XSS) in Classified Listing <= 5.3.8 versions. | |
CVE-2026-42775 |
high | 7.1 | 0.0018 | 2026-06-15 | Unauthenticated Cross Site Scripting (XSS) in AutomatorWP <= 5.7.2 versions. | |
CVE-2026-45437 |
high | 7.1 | 0.0018 | 2026-06-15 | Unauthenticated Cross Site Scripting (XSS) in Product Filter Widget for Elementor <= 1.0.6 versions. | |
CVE-2026-48838 |
high | 7.1 | 0.0024 | 2026-06-15 | Unauthenticated Cross Site Scripting (XSS) in Post SMTP <= 3.6.2 versions. | |
CVE-2026-48867 |
high | 7.1 | 0.0018 | 2026-06-15 | Unauthenticated Cross Site Scripting (XSS) in Quiz And Survey Master <= 11.1.2 versions. | |
CVE-2026-48871 |
high | 7.1 | 0.0023 | 2026-06-15 | Unauthenticated Cross Site Scripting (XSS) in MW WP Form <= 5.1.3 versions. | |
CVE-2026-48876 |
high | 7.1 | 0.0018 | 2026-06-15 | Unauthenticated Cross Site Scripting (XSS) in Stop Spammers <= 2026.3 versions. | |
CVE-2026-48885 |
high | 7.1 | 0.0018 | 2026-06-15 | Unauthenticated Cross Site Scripting (XSS) in HollerBox <= 2.3.10.1 versions. | |
CVE-2026-48966 |
high | 7.1 | 0.0018 | 2026-06-15 | Unauthenticated Cross Site Scripting (XSS) in Funnel Builder by FunnelKit <= 3.15.0.2 versions. | |
CVE-2026-49055 |
high | 7.1 | 0.0023 | 2026-06-15 | Unauthenticated Cross Site Scripting (XSS) in Drag and Drop Multiple File Upload – Contact Form 7 <= | |
CVE-2026-52702 |
high | 7.1 | 0.0014 | 2026-06-15 | Unauthenticated Cross Site Scripting (XSS) in SEO Redirection <= 9.17 versions. | |
CVE-2026-39437 |
high | 7.1 | 0.0014 | 2026-06-16 | Unauthenticated Cross Site Scripting (XSS) in Min Max Step Quantity Limits Manager for WooCommerce < | |
CVE-2026-54198 |
high | 7.1 | 0.0020 | 2026-06-16 | Unauthenticated Cross Site Scripting (XSS) in Media LIbrary Assistant <= 3.35 versions. | |
CVE-2026-22328 |
high | 7.1 | 0.0024 | 2026-06-17 | Unauthenticated Cross Site Scripting (XSS) in Auto Repair <= 22.6 versions. | |
CVE-2026-22329 |
high | 7.1 | 0.0019 | 2026-06-17 | Unauthenticated Cross Site Scripting (XSS) in Skillate <= 1.2.10 versions. | |
CVE-2026-22339 |
high | 7.1 | 0.0023 | 2026-06-17 | Unauthenticated Cross Site Scripting (XSS) in WPJobster <= 6.3.5 versions. | |
CVE-2026-39548 |
high | 7.1 | 0.0018 | 2026-06-17 | Unauthenticated Cross Site Scripting (XSS) in MagOne <= 9.0 versions. | |
CVE-2026-41557 |
high | 7.1 | 0.0023 | 2026-06-17 | Unauthenticated Cross Site Scripting (XSS) in Kapee < 1.7.1 versions. | |
CVE-2026-42385 |
high | 7.1 | 0.0023 | 2026-06-17 | Unauthenticated Cross Site Scripting (XSS) in Profile Builder Pro <= 3.15.0 versions. | |
CVE-2026-48869 |
high | 7.1 | 0.0019 | 2026-06-17 | Unauthenticated Cross Site Scripting (XSS) in Enfold <= 7.1.4 versions. | |
CVE-2026-49074 |
high | 7.1 | 0.0018 | 2026-06-17 | Unauthenticated Cross Site Scripting (XSS) in JetEngine <= 3.8.9.1 versions. | |
CVE-2026-49778 |
high | 7.1 | 0.0019 | 2026-06-17 | Unauthenticated Cross Site Scripting (XSS) in WPFunnels Pro <= 2.9.4 versions. | |
CVE-2026-54188 |
high | 7.1 | 0.0014 | 2026-06-17 | Unauthenticated Cross Site Scripting (XSS) in JetEngine <= 3.8.10 versions. | |
CVE-2026-54189 |
high | 7.1 | 0.0014 | 2026-06-17 | Unauthenticated Cross Site Scripting (XSS) in JetEngine <= 3.8.10 versions. | |
CVE-2026-54192 |
high | 7.1 | 0.0022 | 2026-06-17 | Unauthenticated Cross Site Scripting (XSS) in Popup box <= 6.2.9 versions. | |
CVE-2026-54195 |
high | 7.1 | 0.0020 | 2026-06-17 | Unauthenticated Cross Site Scripting (XSS) in JetFormBuilder <= 3.6.0.1 versions. | |
CVE-2026-40720 |
high | 7.1 | 0.0018 | 2026-06-17 | Unauthenticated Cross Site Scripting (XSS) in Royal Elementor Addons Pro < 1.7.1041 versions. | |
CVE-2026-54070 |
high | 7.1 | 0.0030 | 2026-06-24 | SiYuan is an open-source personal knowledge management system. Prior to 3.7.0, renderPackageREADME i | |
CVE-2026-56005 |
high | 7.1 | 0.0025 | 2026-06-25 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability i | |
CVE-2026-56014 |
high | 7.1 | 0.0025 | 2026-06-25 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability i | |
CVE-2026-56042 |
high | 7.1 | 0.0025 | 2026-06-25 | Customer Cross Site Scripting (XSS) in Advanced Order Export For WooCommerce <= 4.0.9 versions. | |
CVE-2026-56071 |
high | 7.1 | 0.0025 | 2026-06-25 | Unauthenticated Cross Site Scripting (XSS) in Forminator <= 1.53.1 versions. | |
CVE-2026-56011 |
high | 7.1 | 0.0025 | 2026-06-26 | Unauthenticated Cross Site Scripting (XSS) in MapPress Maps for WordPress <= 2.97.3 versions. | |
CVE-2026-56039 |
high | 7.1 | 0.0025 | 2026-06-26 | Unauthenticated Cross Site Scripting (XSS) in Quick Interest Slider <= 3.1.6 versions. | |
CVE-2026-56040 |
high | 7.1 | 0.0025 | 2026-06-26 | Unauthenticated Cross Site Scripting (XSS) in Gutenverse Form <= 2.4.7 versions. | |
CVE-2026-56041 |
high | 7.1 | 0.0025 | 2026-06-26 | Unauthenticated Cross Site Scripting (XSS) in Responsive Lightbox <= 2.7.6 versions. | |
CVE-2026-56043 |
high | 7.1 | 0.0025 | 2026-06-26 | Unauthenticated Cross Site Scripting (XSS) in Customer Reviews for WooCommerce <= 5.110.1 versions. | |
CVE-2026-56044 |
high | 7.1 | 0.0025 | 2026-06-26 | Unauthenticated Cross Site Scripting (XSS) in Blog2Social <= 8.9.2 versions. | |
CVE-2026-56045 |
high | 7.1 | 0.0025 | 2026-06-26 | Unauthenticated Cross Site Scripting (XSS) in Automatic < 3.135.1 versions. | |
CVE-2026-56047 |
high | 7.1 | 0.0025 | 2026-06-26 | Unauthenticated Cross Site Scripting (XSS) in perfmatters <= 2.6.3 versions. | |
CVE-2026-56072 |
high | 7.1 | 0.0025 | 2026-06-26 | Unauthenticated Cross Site Scripting (XSS) in WoodMart <= 8.5.3 versions. | |
CVE-2026-57312 |
high | 7.1 | 0.0025 | 2026-06-26 | Unauthenticated Cross Site Scripting (XSS) in Everest Forms <= 3.4.8 versions. | |
CVE-2026-57317 |
high | 7.1 | 0.0023 | 2026-06-26 | Unauthenticated Cross Site Scripting (XSS) in Simply Schedule Appointments <= 1.6.12.2 versions. | |
CVE-2026-57319 |
high | 7.1 | 0.0025 | 2026-06-26 | Unauthenticated Cross Site Scripting (XSS) in FOX <= 1.4.8 versions. | |
CVE-2026-57322 |
high | 7.1 | 0.0025 | 2026-06-26 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability i | |
CVE-2026-57325 |
high | 7.1 | 0.0025 | 2026-06-26 | Unauthenticated Cross Site Scripting (XSS) in NanoMag <= 1.8 versions. | |
CVE-2026-57320 |
high | 7.1 | 0.0025 | 2026-06-29 | Unauthenticated Cross Site Scripting (XSS) in BEAR <= 1.1.8 versions. | |
CVE-2026-57333 |
high | 7.1 | 0.0025 | 2026-06-29 | Unauthenticated Cross Site Scripting (XSS) in Link Whisper Free <= 0.9.4 versions. | |
CVE-2026-57336 |
high | 7.1 | 0.0025 | 2026-06-29 | Unauthenticated Cross Site Scripting (XSS) in Jobify <= 4.3.2 versions. | |
CVE-2026-57337 |
high | 7.1 | 0.0025 | 2026-06-29 | Unauthenticated Cross Site Scripting (XSS) in Landing Page Builder <= 1.5.3.5 versions. |