CVE-2026-94081 Unauthenticated Cross Site Scripting (XSS) in WordPress Persistent Login <= 3.1.3 versions

Description

Unauthenticated Cross Site Scripting (XSS) in WordPress Persistent Login <= 3.1.3 versions.

Affected products and versions

Product	Affected versions	Fixed in
WordPress Persistent Login 3.1	earliest → 3.1.3	No fix stated

Other CVEs of WordPress Persistent Login

The 3 CVEs of WordPress Persistent Login →

CVE-2026-66594 Subscriber SQL Injection in WordPress Persistent Login <= 3.1.0 versions 8.5 High CVE-2022-4974 The Freemius SDK, as used by hundreds of WordPress plugin and theme developers, was vulnerable to Cross-Site Request… 6.3 Medium