Cross-site Scripting

Every one of the 73 is a mark on the map. Named now: 1 to 26, most at risk first.

1. Essential Addons for Elementor – Best Elementor Templates, Widgets, Kits & WooCommerce Builders <= 5.9.17 - Authenticated (Contributor+) Stored Cross-Site ScriptingCVE-2024-4156wpdevteam · CVSS 6.4 · 0.6% likely

   CWE-79

2. Essential Blocks – Page Builder Gutenberg Blocks, Patterns & Templates <= 4.5.3 - Authenticated (Contributor+) Stored Cross-Site ScriptingCVE-2024-2255wpdevteam · CVSS 6.4 · 0.6% likely

   CWE-79

3. Essential Addons for Elementor – Best Elementor Templates, Widgets, Kits & WooCommerce Builders <= 5.9.15 - Authenticated (Contributor+) Stored Cross-Site Scripting via Filterable…CVE-2024-3728wpdevteam · CVSS 6.4 · 0.6% likely

   CWE-79

4. Essential Addons for Elementor – Best Elementor Templates, Widgets, Kits & WooCommerce Builders <= 5.9.9 - Authenticated (Contributor+) Stored Cross-Site Scripting via Event Calen…CVE-2024-1536wpdevteam · CVSS 7.4 · 0.5% likely

   CWE-79

5. EmbedPress <= 3.9.8 - Authenticated(Contributor+) Stored Cross-Site Scripting via Google Calendar Widget LinkCVE-2024-1425wpdevteam · CVSS 6.4 · 0.5% likely

   CWE-79

6. easy.jobs <= 2.8.4 - Unauthenticated Stored Cross-Site Scripting via 'cover_letter' ParameterCVE-2026-112365wpdevteam · CVSS 7.2 · 0.5% likely

   CWE-79

7. EmbedPress <= 3.8.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via ShortcodeCVE-2023-4283wpdevteam · CVSS 6.4 · 0.5% likely

   CWE-79

8. EmbedPress – Embed PDF, Google Docs, Vimeo, Wistia, Embed YouTube Videos, Audios, Maps & Embed Any Documents in Gutenberg & Elementor <= 3.9.14 - Authenticated (Contributor+) Stor…CVE-2024-3244wpdevteam · CVSS 6.4 · 0.5% likely

   CWE-79

9. Essential Addons for Elementor – Best Elementor Templates, Widgets, Kits & WooCommerce Builders <= 5.9.19 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'Dual Colo…CVE-2024-4448wpdevteam · CVSS 6.4 · 0.5% likely

   CWE-79

10. Essential Blocks – Page Builder Gutenberg Blocks, Patterns & Templates <= 5.2.3 - Authenticated (Contributor+) Stored Cross-Site ScriptingCVE-2024-13803wpdevteam · CVSS 6.4 · 0.5% likely

    CWE-79

11. Essential Addons for Elementor – Best Elementor Templates, Widgets, Kits & WooCommerce Builders <= 5.9.8 - Authenticated (Contributor+) Stored Cross-Site ScriptingCVE-2024-1236wpdevteam · CVSS 6.4 · 0.5% likely

    CWE-79

12. Essential Blocks – Page Builder Gutenberg Blocks, Patterns & Templates <= 4.5.12 - Authenticated (Contributor+) Stored Cross-Site ScriptingCVE-2024-4891wpdevteam · CVSS 6.4 · 0.5% likely

    CWE-79

13. Essential Addons for Elementor – Best Elementor Templates, Widgets, Kits & WooCommerce Builders <= 5.9.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via AccordionCVE-2024-1172wpdevteam · CVSS 5.4 · 0.5% likely

    CWE-79

14. Essential Addons for Elementor – Best Elementor Templates, Widgets, Kits & WooCommerce Builders <= 5.9.11 - Authenticated (Contributor+) Stored Cross-Site ScriptingCVE-2024-2623wpdevteam · CVSS 6.4 · 0.4% likely

    CWE-79

15. Essential Addons for Elementor – Best Elementor Templates, Widgets, Kits & WooCommerce Builders <= 5.9.8 - Authenticated (Contributor+) Stored Cross-Site ScriptingCVE-2024-1276wpdevteam · CVSS 6.4 · 0.4% likely

    CWE-79

16. Essential Addons for Elementor – Best Elementor Templates, Widgets, Kits & WooCommerce Builders <= 5.9.20 - Authenticated (Contributor+) Stored Cross-Site ScriptingCVE-2024-4624wpdevteam · CVSS 6.4 · 0.4% likely

    CWE-79

17. EmbedPress <= 3.9.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via ShortcodeCVE-2024-1349wpdevteam · CVSS 6.4 · 0.4% likely

    CWE-79

18. Essential Addons for Elementor – Best Elementor Templates, Widgets, Kits & WooCommerce Builders <= 5.9.27 - Authenticated (Contributor+) Stored Cross-Site Scripting via no_more_it…CVE-2024-7092wpdevteam · CVSS 6.4 · 0.4% likely

    CWE-79

19. Essential Addons for Elementor – Best Elementor Templates, Widgets, Kits & WooCommerce Builders <= 5.9.23 - Authenticated (Contributor+) Stored Cross-Site ScriptingCVE-2024-5189wpdevteam · CVSS 6.4 · 0.4% likely

    CWE-79

20. Essential Addons for Elementor – Best Elementor Templates, Widgets, Kits & WooCommerce Builders <= 5.9.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via Filterable…CVE-2024-1171wpdevteam · CVSS 5.4 · 0.4% likely

    CWE-79

21. Essential Addons for Elementor – Best Elementor Templates, Widgets, Kits & WooCommerce Builders <= 5.9.7 - Authenticated (Contributor+) Stored Cross-Site ScriptingCVE-2024-0954wpdevteam · CVSS 6.4 · 0.4% likely

    CWE-79

22. Essential Addons for Elementor – Best Elementor Templates, Widgets, Kits & WooCommerce Builders <= 5.9.2 - Authenticated (Contributor+) Stored Cross-Site ScriptingCVE-2023-7044wpdevteam · CVSS 6.4 · 0.4% likely

    CWE-79

23. EmbedPress – Embed PDF, YouTube, Google Docs, Vimeo, Wistia Videos, Audios, Maps & Any Documents in Gutenberg & Elementor <= 3.9.5 - Authenticated (Contributor+) Stored Cross-Site…CVE-2023-6986wpdevteam · CVSS 6.4 · 0.4% likely

    CWE-79

24. Essential Addons for Elementor – Best Elementor Templates, Widgets, Kits & WooCommerce Builders <= 5.9.9 - Authenticated (Contributor+) Stored Cross-Site Scripting via Data TableCVE-2024-1537wpdevteam · CVSS 6.4 · 0.4% likely

    CWE-79

25. Gutenberg Essential Blocks <= 6.0.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via Block AttributesCVE-2026-4658wpdevteam · CVSS 6.4 · 0.4% likely

    CWE-79

26. Essential Addons for Elementor <= 6.6.11 - Authenticated (Contributor+) Stored Cross-Site Scripting via Fancy Text WidgetCVE-2026-15145wpdevteam · CVSS 6.4 · 0.4% likely

    CWE-79

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.