WordPress.com vulnerabilities

🔔 Create alert RSS

Published CVEs affecting WordPress.com products: 2 record(s), with severity, exploitation and fixes.

Quick Interest Slider 1 Gutenverse Form 1

Exploited only (KEV) →

CVE-2026-56040 High · 7.1 CWE-79 Jun 26, 2026

WordPress Gutenverse Form plugin <= 2.4.7 - Cross Site Scripting (XSS) vulnerability

Unauthenticated Cross Site Scripting (XSS) in Gutenverse Form <= 2.4.7 versions.

CVE-2026-56039 High · 7.1 CWE-79 Jun 26, 2026

WordPress Quick Interest Slider plugin <= 3.1.6 - Reflected Cross Site Scripting (XSS) vulnerability

Unauthenticated Cross Site Scripting (XSS) in Quick Interest Slider <= 3.1.6 versions.