Wordfence logs 497 WordPress flaws from October 12–18
Sixty-nine of the week's disclosures were still unpatched, including 23 rated critical, across plugins and themes.
Stories per day · 30 days
2 RSS
3 stories, newest first · one card per story
Stories tagged #cross-site-scripting
AVEVA Pipeline Integrity Monitor
CISA advisory details four flaws in AVEVA Pipeline Integrity Monitor <=2025_SP1_P1, allowing information disclosure, weak-hash admin elevation, and cross-site scripting.
[webapps] CubeCart 6.7.4 - Cross-Site Scripting
A cross-site scripting exploit targeting CubeCart 6.7.4 web applications was published on Exploit-DB as entry 52661.