7.1
High
CVE-2026-93485 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Automattic…
Description
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Automattic WordPress wordpress allows DOM-Based XSS.This issue affects WordPress: from n/a through 7.1.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| WordPress | 7.1 | No fix stated |
| WordPress 7.0 | 7.0 → 7.0.4 | No fix stated |
| WordPress 6.9 | 6.9 → 6.9.7 | No fix stated |
| WordPress 6.8 | 6.8 → 6.8.8 | No fix stated |
| WordPress 6.7 | 6.7 → 6.7.7 | No fix stated |
| WordPress 6.6 | 6.6 → 6.6.7 | No fix stated |
| WordPress 6.5 | 6.5 → 6.5.10 | No fix stated |
| WordPress 6.4 | 6.4 → 6.4.10 | No fix stated |
| WordPress 6.3 | 6.3 → 6.3.10 | No fix stated |
Show the 16 other branches Hide the 16 other branches
| Product | Affected versions | Fixed in |
|---|---|---|
| WordPress 6.2 | 6.2 → 6.2.11 | No fix stated |
| WordPress 6.1 | 6.1 → 6.1.12 | No fix stated |
| WordPress 6.0 | 6.0 → 6.0.14 | No fix stated |
| WordPress 5.9 | 5.9 → 5.9.16 | No fix stated |
| WordPress 5.8 | 5.8 → 5.8.15 | No fix stated |
| WordPress 5.7 | 5.7 → 5.7.17 | No fix stated |
| WordPress 5.6 | 5.6 → 5.6.19 | No fix stated |
| WordPress 5.5 | 5.5 → 5.5.20 | No fix stated |
| WordPress 5.4 | 5.4 → 5.4.21 | No fix stated |
| WordPress 5.3 | 5.3 → 5.3.23 | No fix stated |
| WordPress 5.2 | 5.2 → 5.2.26 | No fix stated |
| WordPress 5.1 | 5.1 → 5.1.24 | No fix stated |
| WordPress 5.0 | 5.0 → 5.0.27 | No fix stated |
| WordPress 4.9 | 4.9 → 4.9.31 | No fix stated |
| WordPress 4.8 | 4.8 → 4.8.30 | No fix stated |
| WordPress 4.7 | 4.7 → 4.7.35 | No fix stated |
Other CVEs of WordPress
The 4 CVEs of WordPress →
CVE-2026-66666
Insertion of Sensitive Information Into Sent Data vulnerability in Automattic WordPress allows Retrieve Embedded…
6.9
Medium
CVE-2024-32111
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Automattic WordPress…
5.0
Medium
CVE-2024-31111
Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in…
6.5
Medium