Cross-site Scripting

Every one of the 7 is a mark on the map. Named now: 1 to 7, most at risk first.

1. Cross-site scripting vulnerability exists in WP Booking versions prior to 2.4.5. If this vulnerability is exploited, an arbitrary script may be executed on the web browser of the…CVE-2024-35297aviplugins.com · CVSS 4.7 · 0.4% likely

   CWE-79

2. WordPress WP Register Profile With Shortcode Plugin <= 3.5.7 is vulnerable to Cross Site Scripting (XSS)CVE-2023-23818Aviplugins.com · CVSS 5.9 · 0.4% likely

   CWE-79

3. WordPress WP Easy Poll Plugin <= 2.2.9 - Reflected Cross Site Scripting (XSS) vulnerabilityCVE-2025-32562aviplugins.com · CVSS 7.1 · 0.3% likely

   CWE-79

4. WordPress Contact Form With Shortcode plugin <= 4.2.5 - Reflected Cross Site Scripting (XSS) vulnerabilityCVE-2025-24564aviplugins.com · CVSS 7.1 · 0.3% likely

   CWE-79

5. WordPress Thumbnail Editor plugin <= 2.3.3 - Cross Site Scripting (XSS) VulnerabilityCVE-2025-53282aviplugins.com · CVSS 6.5 · 0.2% likely

   CWE-79

6. WordPress WP Register Profile With Shortcode plugin <= 3.6.3 - Cross Site Scripting (XSS) VulnerabilityCVE-2025-50042aviplugins.com · CVSS 6.5 · 0.2% likely

   CWE-79

7. WordPress Custom Post Type Attachment plugin <= 3.4.6 - Cross Site Scripting (XSS) vulnerabilityCVE-2025-62907aviplugins.com · CVSS 6.5 · 0.2% likely

   CWE-79

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.