Cross-site Scripting

Every one of the 27 is a mark on the map. Named now: 1 to 26, most at risk first.

1. WordPress Gallery <2.0.0 - Cross-Site ScriptingCVE-2022-1946Wpdevart · 1.8% likely

   CWE-79

2. AP Pricing Tables Lite < 1.1.5 - Reflected Cross-Site ScriptingCVE-2022-0640Wpdevart · 0.9% likely

   CWE-79

3. Coming Soon and Maintenance Mode < 3.5.3 - Authenticated Stored XSSCVE-2021-24577Wpdevart · 0.6% likely

   CWE-79

4. YouTube Embed, Playlist and Popup < 2.3.9 - Contributor+ Stored XSSCVE-2021-24464Wpdevart · 0.6% likely

   CWE-79

5. Social comments by WpDevArt < 2.5.0 - Admin+ Stored Cross-Site ScriptingCVE-2022-0876Wpdevart · 0.6% likely

   CWE-79

6. WordPress Poll, Survey, Questionnaire and Voting system plugin <= 1.7.4 - Authenticated Cross-Site Scripting (XSS) vulnerabilityCVE-2022-34656wpdevart · CVSS 4.8 · 0.6% likely

   CWE-79

7. Social Like Box and Page by WpDevArt < 0.8.41 - Contributor+ Stored XSSCVE-2023-0177Wpdevart · CVSS 5.4 · 0.5% likely

   CWE-79

8. WordPress Responsive Image Gallery, Gallery Album Plugin <= 2.0.1 is vulnerable to Cross Site Scripting (XSS)CVE-2022-47603wpdevart · CVSS 7.1 · 0.4% likely

   CWE-79

9. WordPress Gallery – Image and Video Gallery with Thumbnails plugin <= 2.0.3 - Reflected Cross Site Scripting (XSS) vulnerabilityCVE-2024-30550wpdevart · CVSS 7.1 · 0.4% likely

   CWE-79

10. WordPress Countdown and CountUp, WooCommerce Sales Timer Plugin <= 1.8.2 is vulnerable to Cross Site Scripting (XSS)CVE-2023-47533wpdevart · CVSS 5.9 · 0.4% likely

    CWE-79

11. WordPress Organization chart Plugin <= 1.4.4 is vulnerable to Cross Site Scripting (XSS)CVE-2023-24387WPdevart · CVSS 5.9 · 0.4% likely

    CWE-79

12. WordPress Image and Video Lightbox, Image PopUp Plugin <= 2.1.5 is vulnerable to Cross Site Scripting (XSS)CVE-2023-24004WPdevart · CVSS 5.9 · 0.4% likely

    CWE-79

13. WordPress YouTube Embed, Playlist and Popup by WpDevArt Plugin <= 2.6.3 is vulnerable to Cross Site Scripting (XSS)CVE-2023-24002WPdevart · CVSS 5.9 · 0.4% likely

    CWE-79

14. WordPress Responsive Vertical Icon Menu Plugin <= 1.5.8 is vulnerable to Cross Site Scripting (XSS)CVE-2023-23870wpdevart · CVSS 5.9 · 0.4% likely

    CWE-79

15. WordPress Gallery – Image and Video Gallery with Thumbnails plugin <= 2.0.3 - Cross Site Scripting (XSS) vulnerabilityCVE-2024-31120wpdevart · CVSS 6.5 · 0.4% likely

    CWE-79

16. WordPress Contact Form Builder, Contact Widget Plugin <= 2.1.6 is vulnerable to Cross Site Scripting (XSS)CVE-2023-46075wpdevart · CVSS 7.1 · 0.4% likely

    CWE-79

17. WordPress Booking calendar, Appointment Booking System Plugin <= 3.2.3 is vulnerable to Cross Site Scripting (XSS)CVE-2022-47438WpDevArt · CVSS 5.9 · 0.4% likely

    CWE-79

18. Booking Calendar and Booking Calendar Pro <= Multiple Versions - Reflected Cross-Site Scripting via 'calendar_id'CVE-2024-12077wpdevart · CVSS 6.1 · 0.4% likely

    CWE-79

19. WordPress Responsive Image Gallery, Gallery Album Plugin <= 2.0.3 is vulnerable to Cross Site Scripting (XSS)CVE-2023-45630wpdevart · CVSS 7.1 · 0.4% likely

    CWE-79

20. Organization chart <= 1.5.0 - Authenticated (Subscriber+) Stored Cross-Site Scripting via title_input and node_description ParametersCVE-2024-7355wpdevart · CVSS 4.9 · 0.3% likely

    CWE-79

21. WordPress Widget Countdown plugin <= 2.7.1 - Cross Site Scripting (XSS) vulnerabilityCVE-2025-24719wpdevart · CVSS 6.5 · 0.3% likely

    CWE-79

22. Multiple Plugins <= (Various Versions) - Authenticated (Contributor+) Stored DOM-Based Cross-Site Scripting via ThickBox JavaScript LibraryCVE-2025-2537wpdevart · CVSS 6.4 · 0.3% likely

    CWE-79

23. WordPress Widget Countdown plugin <= 2.7.4 - Cross Site Scripting (XSS) VulnerabilityCVE-2025-47443wpdevart · CVSS 6.5 · 0.3% likely

    CWE-79

24. Countdown Timer - Widget Countdown <= 2.7.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via ShortcodeCVE-2025-14555wpdevart · CVSS 6.4 · 0.2% likely

    CWE-79

25. WordPress Contact Form Builder 1.6.1 Cross-Site Scripting via code_generator.phpCVE-2022-50959wpdevart · CVSS 6.1 · 0.2% likely

    CWE-79

26. Countdown Timer – Widget Countdown <= 3.0.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'redirect_url' Shortcode AttributeCVE-2026-16495wpdevart · CVSS 6.4 · 0.2% likely

    CWE-79

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.