Cross-site Scripting

Every one of the 27 is a mark on the map. Named now: 1 to 26, most at risk first.

1. WordPress Essential Addons for Elementor plugin <= 6.0.14 - Reflected Cross Site Scripting (XSS) vulnerabilityCVE-2025-24752WPDeveloper · CVSS 7.1 · 1.3% likely

   CWE-79

2. The twitter-cards-meta plugin before 2.5.0 for WordPress has XSS.CVE-2017-18503Wpdeveloper · 0.9% likely

   CWE-79

3. BetterLinks < 1.2.6 - Admin+ Stored Cross-Site ScriptingCVE-2021-24812Wpdeveloper · 0.6% likely

   CWE-79

4. Essential Addons for Elementor < 4.5.4 - Contributor+ Stored Cross-Site Scripting (XSS)CVE-2021-24255Wpdeveloper · 0.6% likely

   CWE-79

5. EmbedPress < 3.9.2 - Reflected XSSCVE-2023-5750Wpdeveloper · 0.5% likely

   CWE-79

6. EmbedPress < 3.9.2 - Reflected XSSCVE-2023-5749Wpdeveloper · 0.5% likely

   CWE-79

7. Essential Blocks < 4.7.0 - Contributor+ Stored XSSCVE-2024-5595Wpdeveloper · CVSS 5.4 · 0.4% likely

   CWE-79

8. WordPress Essential Blocks plugin <= 4.5.3 - Cross Site Scripting (XSS) vulnerabilityCVE-2024-31306WPDeveloper · CVSS 6.5 · 0.4% likely

   CWE-79

9. WordPress Parallax Slider Block Plugin <= 1.2.4 is vulnerable to Cross Site Scripting (XSS)CVE-2023-49184WPDeveloper · CVSS 5.9 · 0.4% likely

   CWE-79

10. WordPress Essential Addons for Elementor Pro Plugin <= 5.4.8 is vulnerable to Cross Site Scripting (XSS)CVE-2023-32241WPDeveloper · CVSS 7.1 · 0.4% likely

    CWE-79

11. WordPress Essential Addons for Elementor plugin <= 6.1.9 - Cross Site Scripting (XSS) VulnerabilityCVE-2025-39590WPDeveloper · CVSS 6.5 · 0.3% likely

    CWE-79

12. WordPress NotificationX plugin <= 2.9.5 - Cross Site Scripting (XSS) vulnerabilityCVE-2025-22683WPDeveloper · CVSS 6.5 · 0.3% likely

    CWE-79

13. WordPress NotificationX plugin <= 3.3.6 - Content Injection vulnerabilityCVE-2026-119507WPDeveloper · CVSS 5.3 · 0.3% likely

    CWE-80

14. WordPress Typing Text plugin <= 1.2.7 - Cross Site Scripting (XSS) vulnerabilityCVE-2025-22315WPDeveloper · CVSS 6.5 · 0.3% likely

    CWE-79

15. WordPress Typing Text plugin <= 1.2.5 - Cross Site Scripting (XSS) vulnerabilityCVE-2024-5058WPDeveloper · CVSS 6.5 · 0.3% likely

    CWE-79

16. WordPress EmbedPress plugin <= 4.0.8 - Cross Site Scripting (XSS) vulnerabilityCVE-2024-43936WPDeveloper · CVSS 6.5 · 0.3% likely

    CWE-79

17. WordPress Essential Addons for Elementor plugin <= 5.9.26 - Cross Site Scripting (XSS) vulnerabilityCVE-2024-39649WPDeveloper · CVSS 6.5 · 0.3% likely

    CWE-79

18. WordPress EmbedPress plugin <= 4.0.14 - Cross Site Scripting (XSS) vulnerabilityCVE-2024-50461WPDeveloper · CVSS 6.5 · 0.3% likely

    CWE-79

19. WordPress Essential Blocks plugin <= 4.8.4 - Cross Site Scripting (XSS) vulnerabilityCVE-2024-47385WPDeveloper · CVSS 6.5 · 0.3% likely

    CWE-79

20. WordPress BetterDocs – Best Documentation, FAQ & Knowledge Base Plugin with AI Support & Instant Answer for Elementor & Gutenberg plugin <= 3.5.8 - Cross Site Scripting (XSS) vuln…CVE-2024-43227WPDeveloper · CVSS 6.5 · 0.3% likely

    CWE-79

21. WordPress Essential Addons for Elementor plugin <= 6.0.7 - Cross Site Scripting (XSS) vulnerabilityCVE-2024-56063WPDeveloper · CVSS 6.5 · 0.3% likely

    CWE-79

22. WordPress Templately plugin <= 3.7.1 - Cross Site Scripting (XSS) vulnerabilityCVE-2026-66667WPDeveloper · CVSS 7.1 · 0.3% likely

    CWE-79

23. WordPress EmbedPress plugin <= 4.5.6 - Cross Site Scripting (XSS) vulnerabilityCVE-2026-61961WPDeveloper · CVSS 7.1 · 0.3% likely

    CWE-79

24. WordPress Table Of Contents Block plugin <= 1.5.0 - Cross Site Scripting (XSS) vulnerabilityCVE-2026-66645WPDeveloper · CVSS 6.5 · 0.2% likely

    CWE-79

25. WordPress BetterDocs plugin <= 4.6.2 - Cross Site Scripting (XSS) vulnerabilityCVE-2026-65562WPDeveloper · CVSS 6.5 · 0.2% likely

    CWE-79

26. WordPress Essential Addons for Elementor plugin <= 6.5.3 - Cross Site Scripting (XSS) vulnerabilityCVE-2025-69092WPDeveloper · CVSS 6.5 · 0.2% likely

    CWE-79

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.