CVE-2026-66456 Subscriber Cross Site Scripting (XSS) in Profile Extra Fields by BestWebSoft <= 1.3.4 versions

Description

Subscriber Cross Site Scripting (XSS) in Profile Extra Fields by BestWebSoft <= 1.3.4 versions.

Affected products and versions

Product	Affected versions	Fixed in
Profile Extra Fields by BestWebSoft 1.3	earliest → 1.3.4	No fix stated

Other CVEs of Profile Extra Fields by BestWebSoft

The 2 CVEs of Profile Extra Fields by BestWebSoft →

CVE-2023-4469 The Profile Extra Fields by BestWebSoft plugin for WordPress is vulnerable to unauthorized access of data due to a… 5.3 Medium