Cross-site Scripting

Every one of the 41 is a mark on the map. Named now: 1 to 26, most at risk first.

1. WordPress Post Grid <2.1.8 - Cross-Site ScriptingCVE-2021-24488Pickplugins · 11% likely

   CWE-79

2. WordPress WooCommerce <1.13.22 - Cross-Site ScriptingCVE-2021-24300PickPlugins · 11% likely

   CWE-79

3. Stored Cross-Site Scripting (XSS) vulnerabilities in the Team Showcase plugin before 1.22.16 for WordPress allow remote authenticated attackers to import layouts including JavaScr…CVE-2020-35937Pickplugins · CVSS 7.5 · 1.7% likely

   CWE-79

4. Stored Cross-Site Scripting (XSS) vulnerabilities in the Post Grid plugin before 2.0.73 for WordPress allow remote authenticated attackers to import layouts including JavaScript s…CVE-2020-35936Pickplugins · CVSS 7.5 · 1.7% likely

   CWE-79

5. Post Grid < 2.1.16 - Reflected Cross-Site Scripting via keywordCVE-2021-24986Pickplugins · 0.8% likely

   CWE-79

6. An issue was discovered in the Accordion plugin before 2.2.9 for WordPress. The unprotected AJAX wp_ajax_accordions_ajax_import_json action allowed any authenticated user with Sub…CVE-2020-13644Pickplugins · CVSS 5.4 · 0.8% likely

   CWE-79

7. Post Grid < 2.1.16 - Reflected Cross-Site Scripting via post_typesCVE-2022-0447Pickplugins · 0.6% likely

   CWE-79

8. Accordion < 2.2.30 - Authenticated Reflected Cross-Site Scripting (XSS)CVE-2021-24283PickPlugins · 0.6% likely

   CWE-79

9. Breadcrumb < 1.5.33 - Contributor+ Stored XSS via ShortcodeCVE-2022-4836Pickplugins · CVSS 5.4 · 0.6% likely

   CWE-79

10. Product Designer <= 1.0.36 - Authenticated (Author+) Stored Cross-Site Scripting via SVG File UploadCVE-2024-9111pickplugins · CVSS 6.4 · 0.5% likely

    CWE-79

11. PickPlugins Product Slider for WooCommerce < 1.13.42 - Contributor+ Stored XSSCVE-2023-0166Pickplugins · CVSS 5.4 · 0.5% likely

    CWE-79

12. WordPress Tabs & Accordion plugin <= 1.3.10 - Content Injection vulnerabilityCVE-2023-40557PickPlugins · CVSS 5.4 · 0.4% likely

    CWE-80

13. WordPress Combo Blocks plugin <= 2.2.74 - Reflected Cross Site Scripting (XSS) vulnerabilityCVE-2024-30441PickPlugins · CVSS 7.1 · 0.4% likely

    CWE-79

14. WordPress User profile plugin <= 2.0.20 - Subscriber+ Stored Cross Site Scripting (XSS) vulnerabilityCVE-2024-29097PickPlugins · CVSS 6.3 · 0.4% likely

    CWE-79

15. Post Grid Combo – 36+ Gutenberg Blocks <= 2.2.64 - Authenticated (Contributor+) Cross-Site ScriptingCVE-2023-6645pickplugins · CVSS 6.4 · 0.3% likely

    CWE-79

16. WordPress Job Board Manager Plugin <= 2.1.61 - Reflected Cross Site Scripting (XSS) vulnerabilityCVE-2025-22679PickPlugins · CVSS 7.1 · 0.3% likely

    CWE-79

17. WordPress Related Post Plugin <= 2.0.53 is vulnerable to Cross Site Scripting (XSS)CVE-2023-51666PickPlugins · CVSS 6.5 · 0.3% likely

    CWE-79

18. Gutenberg Blocks, Page Builder – ComboBlocks <= 2.2.87 - Authenticated (Contributor+) Stored Cross-Site Scripting via Accordion BlockCVE-2024-7588pickplugins · CVSS 6.4 · 0.3% likely

    CWE-79

19. Post Grid, Form Maker, Popup Maker, WooCommerce Blocks, Post Blocks, Post Carousel – Combo Blocks <= 2.2.85 - Authenticated (Contributor+) Stored Cross-Site Scripting via redirect…CVE-2024-6346pickplugins · CVSS 6.4 · 0.3% likely

    CWE-79

20. Post Grid and Gutenberg Blocks < 2.2.93 - Contributor+ Stored XSSCVE-2024-9645Pickplugins · CVSS 5.4 · 0.3% likely

    CWE-79

21. WordPress Mail Picker plugin <= 1.0.15 - Cross Site Scripting (XSS) vulnerabilityCVE-2024-53772PickPlugins · CVSS 6.5 · 0.3% likely

    CWE-79

22. Wishlist <= 1.0.43 - Authenticated (Contributor+) Stored Cross-Site ScriptingCVE-2024-12809pickplugins · CVSS 6.4 · 0.3% likely

    CWE-79

23. WordPress Product Slider for WooCommerce by PickPlugins plugin <= 1.13.50 - Reflected Cross Site Scripting (XSS) vulnerabilityCVE-2024-45459PickPlugins · CVSS 7.1 · 0.3% likely

    CWE-79

24. WordPress Team Showcase plugin <= 1.22.25 - Reflected Cross Site Scripting (XSS) vulnerabilityCVE-2024-44002PickPlugins · CVSS 7.1 · 0.3% likely

    CWE-79

25. WordPress Question Answer plugin <= 1.2.70 - Reflected Cross Site Scripting (XSS) vulnerabilityCVE-2025-32646PickPlugins · CVSS 7.1 · 0.3% likely

    CWE-79

26. WordPress Wishlist Plugin <= 1.0.39 - Reflected Cross Site Scripting (XSS) vulnerabilityCVE-2025-24655PickPlugins · CVSS 7.1 · 0.3% likely

    CWE-79

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.