Cross-site Scripting

Every one of the 7 is a mark on the map. Named now: 1 to 7, most at risk first.

1. Popup Anything < 2.0.4 - Contributor+ Stored Cross-Site ScriptingCVE-2021-24883Essentialplugin · 0.8% likely

   CWE-79

2. Post Category Image With Grid and Slider < 1.4.8 - Contributor+ Stored XSS via ShortcodeCVE-2022-4747Essentialplugin · CVSS 5.4 · 0.7% likely

   CWE-79

3. Popup Anything < 2.1.7 - Reflected Cross-Site ScriptingCVE-2022-2115Essentialplugin · 0.7% likely

   CWE-79

4. WP Blog and Widget < 2.3.1 - Contributor+ Stored XSS via ShortcodeCVE-2022-4824Essentialplugin · CVSS 5.4 · 0.6% likely

   CWE-79

5. Product Slider and Carousel with Category for WooCommerce < 2.8 - Contributor+ Stored XSS via ShortcodeCVE-2022-4791Essentialplugin · CVSS 5.4 · 0.5% likely

   CWE-79

6. Album and Image Gallery Plus Lightbox <= 2.1.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via Plugin's ShortcodeCVE-2025-13612essentialplugin · CVSS 6.4 · 0.4% likely

   CWE-79

7. WordPress Meta Slider and Carousel with Lightbox plugin <= 2.0.1 - Cross Site Scripting (XSS) vulnerabilityCVE-2024-47307Essential Plugin · CVSS 6.5 · 0.3% likely

   CWE-79

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.