CVE-2026-66599 Unauthenticated Cross Site Scripting (XSS) in WPComplete <= 2.9.5.6 versions

Description

Unauthenticated Cross Site Scripting (XSS) in WPComplete <= 2.9.5.6 versions.

Affected products and versions

Product	Affected versions	Fixed in
WPComplete 2.9	earliest → 2.9.5.6	No fix stated

Other CVEs of WPComplete

The 2 CVEs of WPComplete →

CVE-2026-66479 Cross-Site Request Forgery (CSRF) vulnerability in Liquid Web / StellarWP WPComplete wpcomplete allows Stored XSS.This… 7.1 High