Cross-site Scripting

Every one of the 35 is a mark on the map. Named now: 1 to 26, most at risk first.

1. WPBot <= 8.4.9 - Cross-Site ScriptingCVE-2026-13731quantumcloud · CVSS 7.2 · 0.9% likely

   CWE-79

2. An XSS vulnerability in qcopd-shortcode-generator.php in the Simple Link Directory plugin before 7.3.5 for WordPress allows remote attackers to inject arbitrary web script or HTML…CVE-2019-13463Quantumcloud · 1.1% likely

   CWE-79

3. AI ChatBot < 4.6.1 - Admin+ Stored Cross-Site ScriptingCVE-2023-3175Quantumcloud · 0.6% likely

   CWE-79

4. Slider Hero < 8.4.4 - Admin+ Stored Cross-Site ScriptingCVE-2022-3074Quantumcloud · CVSS 4.8 · 0.6% likely

   CWE-79

5. WPBot <= 8.7.3 - Unauthenticated Stored Cross-Site Scripting via 'conversation' ParameterCVE-2026-83593quantumcloud · CVSS 7.2 · 0.5% likely

   CWE-79

6. Chatbot < 4.7.8 - Admin+ Stored XSS in FAQ BuilderCVE-2023-4253Quantumcloud · CVSS 4.8 · 0.5% likely

   CWE-79

7. Chatbot < 4.7.8 - Admin+ Stored XSS in Language SettingsCVE-2023-4254Quantumcloud · CVSS 4.8 · 0.5% likely

   CWE-79

8. AI ChatBot < 4.5.5 - Admin+ Stored Cross-Site ScriptingCVE-2023-2742Quantumcloud · CVSS 4.8 · 0.5% likely

   CWE-79

9. AI ChatBot < 4.5.6 - Admin+ Stored Cross-Site ScriptingCVE-2023-2811Quantumcloud · CVSS 4.8 · 0.4% likely

   CWE-79

10. ChatBot < 4.5.1 - Admin+ Stored XSSCVE-2023-1649Quantumcloud · CVSS 4.8 · 0.4% likely

    CWE-79

11. WordPress AI ChatBot Plugin <= 4.3.0 is vulnerable to Cross Site Scripting (XSS)CVE-2022-47613QuantumCloud · CVSS 5.9 · 0.4% likely

    CWE-79

12. AI Content Writer, RSS Feed to Post, Autoblogging SEO Help <= 6.1.3 - Reflected Cross-Site ScriptingCVE-2024-12156quantumcloud · CVSS 6.1 · 0.4% likely

    CWE-79

13. WordPress Conversational Forms for ChatBot Plugin <= 1.1.6 is vulnerable to Cross Site Scripting (XSS)CVE-2023-23981QuantumCloud · CVSS 5.9 · 0.4% likely

    CWE-79

14. The ChatBot for WordPress is vulnerable to Stored Cross-Site Scripting via the FAQ Builder in versions 4.8.6 through 4.9.6 due to insufficient input sanitization and output escapi…CVE-2023-5606quantumcloud · CVSS 4.4 · 0.4% likely

    CWE-79

15. iChart – Easy Charts and Graphs <= 2.1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via width ParameterCVE-2024-11928quantumcloud · CVSS 6.4 · 0.4% likely

    CWE-79

16. WordPress ChatBot Conversational Forms plugin <= 1.2.0 - Cross Site Scripting (XSS) vulnerabilityCVE-2024-34380QuantumCloud · CVSS 5.9 · 0.4% likely

    CWE-79

17. WordPress AI Infographic Maker OpenAI plugin <= 4.6.6 - Cross Site Scripting (XSS) vulnerabilityCVE-2024-32696QuantumCloud · CVSS 6.5 · 0.3% likely

    CWE-79

18. WordPress Slider Hero plugin <= 8.6.1 - Cross Site Scripting (XSS) vulnerabilityCVE-2024-29922Quantum Cloud · CVSS 5.9 · 0.3% likely

    CWE-79

19. Simple Video Directory < 1.4.4 - Contributor+ Stored XSSCVE-2024-5811Quantumcloud · CVSS 6.1 · 0.3% likely

    CWE-79

20. AI ChatBot for WordPress – WPBot <= 5.5.7 - Authenticated (Administrator+) Stored Cross-Site ScriptingCVE-2024-6669quantumcloud · CVSS 5.5 · 0.3% likely

    CWE-79

21. WordPress Highlight plugin <= 2.0.2 - Cross Site Scripting (XSS) vulnerabilityCVE-2024-56297QuantumCloud · CVSS 5.9 · 0.3% likely

    CWE-79

22. ChatBot < 4.4.9 - Unauthenticated Stored XSSCVE-2023-1660Quantumcloud · CVSS 6.1 · 0.3% likely

    CWE-79

23. AI ChatBot for WordPress – WPBot < 6.2.4 - Admin+ Stored XSSCVE-2025-0329Quantumcloud · CVSS 4.8 · 0.3% likely

    CWE-79

24. WPBOT < 7.1.0 - Admin+ Stored XSSCVE-2025-9111Quantumcloud · CVSS 3.5 · 0.3% likely

    CWE-79

25. WordPress Simple Link Directory plugin <= 15.0.5 - Cross Site Scripting (XSS) vulnerabilityCVE-2026-57682QuantumCloud · CVSS 7.1 · 0.3% likely

    CWE-79

26. WordPress ChatBot plugin <= 8.3.7 - Cross Site Scripting (XSS) vulnerabilityCVE-2026-57363QuantumCloud · CVSS 7.1 · 0.3% likely

    CWE-79

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.