CVE Intelligence

Nexcess WPComplete vulnerabilities

🔔 Create alert RSS Version checker

Published CVEs affecting Nexcess WPComplete: 2 record(s), with affected versions and fixes.

CVE-2026-57661 Medium · 5.4 CWE-862 Jun 26, 2026
WordPress WPComplete plugin <= 2.9.5.5 - Broken Access Control vulnerability
Subscriber Broken Access Control in WPComplete <= 2.9.5.5 versions.
CVE-2026-42750 Medium · 6.5 CWE-79 May 27, 2026
WordPress WPComplete plugin <= 2.9.5.4 - Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Nexcess WPComplete wpcomplete allows Stored XSS.This issue affects WPComplete: from n/a through <= 2.9.5.4.