CVE-2026-65560 is an unauthenticated Cross Site Scripting (XSS) vulnerability in Houzez Property Feed plugin version 2.5.48 or earlier. The vulnerability has a CVSS score of 7.1 and is classified as HIGH severity. This vulnerability could allow attackers to inject malicious scripts into web pages viewed by users of the Houzez Property Feed plugin. WordPress administrators and users of the Houzez Property [truncated]
A reflected cross-site scripting (XSS) vulnerability was discovered in the PropertyHive WordPress plugin up to version 2.2.3. This issue allows an attacker to inject malicious scripts into web pages, potentially leading to unauthorized actions or data theft. The vulnerability has a CVSS score of 7.1 and is considered HIGH severity. Users of the PropertyHive WordPress plugin, particularly those with versio [truncated]
