Cross-site Scripting

Every one of the 15 is a mark on the map. Named now: 1 to 15, most at risk first.

1. DOM based Cross-site scripting (XSS) vulnerability in the Bridge theme before 11.2 for WordPress allows remote attackers to inject arbitrary JavaScript.CVE-2017-13138Qodeinteractive · 1.2% likely

   CWE-79

2. Qi Addons For Elementor <= 1.6.7 - Authenticated (Contributor+) Stored Cross-Site ScriptingCVE-2024-0826qodeinteractive · CVSS 6.4 · 0.6% likely

   CWE-79

3. WordPress Qi Addons For Elementor Plugin <= 1.6.3 is vulnerable to Cross Site Scripting (XSS)CVE-2023-47680Qode Interactive · CVSS 6.5 · 0.4% likely

   CWE-79

4. Qi Addons For Elementor <= 1.8.7 - Authenticated (Contributor+) Stored Cross-Site ScriptingCVE-2024-13699qodeinteractive · CVSS 6.4 · 0.4% likely

   CWE-79

5. WordPress Bridge Core Plugin <= 3.0.9 is vulnerable to Cross Site Scripting (XSS)CVE-2023-40333Qode Interactive · CVSS 7.1 · 0.4% likely

   CWE-79

6. Qi Addons For Elementor <= 1.11 - Reflected DOM-Based Cross-Site Scripting via 's' ParameterCVE-2026-92249qodeinteractive · CVSS 6.1 · 0.4% likely

   CWE-79

7. Qi Addons For Elementor <= 1.7.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Button WidgetCVE-2024-4364qodeinteractive · CVSS 6.4 · 0.3% likely

   CWE-79

8. Qi Addons For Elementor <= 1.7.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Countdown widgetCVE-2024-3309qodeinteractive · CVSS 6.4 · 0.3% likely

   CWE-79

9. Qi Blocks < 1.4 - Contributor+ Stored XSS via Counter BlockCVE-2025-1625Qodeinteractive · CVSS 5.4 · 0.3% likely

   CWE-79

10. Qi Addons for Elementor <= 1.9.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via TypeOut Text WidgetCVE-2025-8146qodeinteractive · CVSS 6.4 · 0.3% likely

    CWE-79

11. QODE Wishlist for WooCommerce <= 1.2.9 - Unauthenticated Stored Cross-Site Scripting via 'table_title' Shared Wishlist Field via Guest CookieCVE-2026-121516qodeinteractive · CVSS 6.1 · 0.3% likely

    CWE-79

12. Qi Addons For Elementor <= 1.9.1 - Authenticated (Contributor+) Stored Cross-Site ScriptingCVE-2025-6252qodeinteractive · CVSS 6.4 · 0.3% likely

    CWE-79

13. Qi Blocks < 1.4 - Contributor+ Stored XSS via ToC BlockCVE-2025-1627Qodeinteractive · CVSS 5.4 · 0.3% likely

    CWE-79

14. Qi Blocks < 1.4 - Contributor+ Stored XSS vi Countdown BlockCVE-2025-1626Qodeinteractive · CVSS 5.4 · 0.3% likely

    CWE-79

15. Qi Blocks <= 1.2.9 - Authenticated (Author+) Stored Cross-Site ScriptingCVE-2024-5221qodeinteractive · CVSS 6.4 · 0.3% likely

    CWE-79

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.