CVE Vulnerability Advisory Database
Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.
WooCommerce Extra Product Options Pro Reflected Cross-Site Scripting (XSS) Vulnerability (CVE-2026-104926)
[Affected Scope] WooCommerce Extra Product Options Pro plugin up to and including version 3.3.2
[Impact] Unauthenticated attackers can execute arbitrary web scripts in the victim's browser session via crafted links, potentially leading to session hijacking
[Mitigation] Immediately update the plugin to the latest secure version (3.3.3 or higher) and apply WAF rules
Netsweeper Web Administration Reflected XSS Vulnerability (CVE-2015-20130) Advisory
[Affected Scope] Netsweeper versions prior to 4.0.11 and 4.1.0 through 4.1.4.
[Impact] Remote attackers can execute arbitrary JavaScript in the victim's browser, potentially leading to administrative session hijacking.
[Mitigation] Immediately upgrade Netsweeper to version 4.0.11, 4.1.5, or later.