{ "schemaVersion": 1, "attribution": [ { "source": "CISA Known Exploited Vulnerabilities", "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog", "licence": "US government work" }, { "source": "GitHub Advisory Database", "url": "https://github.com/advisories", "licence": "CC BY 4.0" }, { "source": "Have I Been Pwned", "url": "https://haveibeenpwned.com/", "licence": "CC BY 4.0" }, { "source": "CVE Program (CVE records)", "url": "https://www.cve.org/Legal/TermsOfUse", "licence": "CVE Terms of Use", "notice": "Copyright © 1999-2026, The MITRE Corporation. CVE is a trademark and the CVE logo is a registered trademark of The MITRE Corporation.", "terms": "CVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE™). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy." }, { "source": "FIRST EPSS", "url": "https://www.first.org/epss/", "licence": "free to use; FIRST requests attribution" } ], "record": { "id": "CVE-2026-93485", "sourceURL": "https://www.cve.org/CVERecord?id=CVE-2026-93485", "idYear": 2026, "status": "PUBLISHED", "publishedAt": "2026-09-18T06:00:05.645Z", "updatedAt": "2026-10-17T08:25:50.124Z", "importedAt": "2026-10-24T01:58:35.090Z", "snapshot": { "id": "cve_2026-10-24_midnight_baseline", "at": "2026-10-24T00:00:00.000Z", "source": "https://github.com/CVEProject/cvelistV5/releases/tag/cve_2026-10-24_0100Z" }, "facts": { "title": "WordPress Core <= 7.1 - Cross Site Scripting (XSS) vulnerability", "summary": "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Automattic WordPress wordpress allows DOM-Based XSS.This issue affects WordPress: from n/a through 7.1.", "affected": [ { "vendor": "Automattic", "product": "WordPress", "packageName": "wordpress", "collectionURL": "https://wordpress.org/plugins", "defaultStatus": "unaffected", "versions": [ { "version": "7.1", "status": "affected" }, { "version": "7.0", "status": "affected", "versionType": "custom", "lessThanOrEqual": "7.0.4", "changes": [ { "at": "7.0.5", "status": "unaffected" } ] }, { "version": "6.9", "status": "affected", "versionType": "custom", "lessThanOrEqual": "6.9.7", "changes": [ { "at": "6.9.8", "status": "unaffected" } ] }, { "version": "6.8", "status": "affected", "versionType": "custom", "lessThanOrEqual": "6.8.8", "changes": [ { "at": "6.8.9", "status": "unaffected" } ] }, { "version": "6.7", "status": "affected", "versionType": "custom", "lessThanOrEqual": "6.7.7", "changes": [ { "at": "6.7.8", "status": "unaffected" } ] }, { "version": "6.6", "status": "affected", "versionType": "custom", "lessThanOrEqual": "6.6.7", "changes": [ { "at": "6.6.8", "status": "unaffected" } ] }, { "version": "6.5", "status": "affected", "versionType": "custom", "lessThanOrEqual": "6.5.10", "changes": [ { "at": "6.5.11", "status": "unaffected" } ] }, { "version": "6.4", "status": "affected", "versionType": "custom", "lessThanOrEqual": "6.4.10", "changes": [ { "at": "6.4.11", "status": "unaffected" } ] }, { "version": "6.3", "status": "affected", "versionType": "custom", "lessThanOrEqual": "6.3.10", "changes": [ { "at": "6.3.11", "status": "unaffected" } ] }, { "version": "6.2", "status": "affected", "versionType": "custom", "lessThanOrEqual": "6.2.11", "changes": [ { "at": "6.2.12", "status": "unaffected" } ] }, { "version": "6.1", "status": "affected", "versionType": "custom", "lessThanOrEqual": "6.1.12", "changes": [ { "at": "6.1.13", "status": "unaffected" } ] }, { "version": "6.0", "status": "affected", "versionType": "custom", "lessThanOrEqual": "6.0.14", "changes": [ { "at": "6.0.15", "status": "unaffected" } ] }, { "version": "5.9", "status": "affected", "versionType": "custom", "lessThanOrEqual": "5.9.16", "changes": [ { "at": "5.9.17", "status": "unaffected" } ] }, { "version": "5.8", "status": "affected", "versionType": "custom", "lessThanOrEqual": "5.8.15", "changes": [ { "at": "5.8.16", "status": "unaffected" } ] }, { "version": "5.7", "status": "affected", "versionType": "custom", "lessThanOrEqual": "5.7.17", "changes": [ { "at": "5.7.18", "status": "unaffected" } ] }, { "version": "5.6", "status": "affected", "versionType": "custom", "lessThanOrEqual": "5.6.19", "changes": [ { "at": "5.6.20", "status": "unaffected" } ] }, { "version": "5.5", "status": "affected", "versionType": "custom", "lessThanOrEqual": "5.5.20", "changes": [ { "at": "5.5.21", "status": "unaffected" } ] }, { "version": "5.4", "status": "affected", "versionType": "custom", "lessThanOrEqual": "5.4.21", "changes": [ { "at": "5.4.22", "status": "unaffected" } ] }, { "version": "5.3", "status": "affected", "versionType": "custom", "lessThanOrEqual": "5.3.23", "changes": [ { "at": "5.3.24", "status": "unaffected" } ] }, { "version": "5.2", "status": "affected", "versionType": "custom", "lessThanOrEqual": "5.2.26", "changes": [ { "at": "5.2.27", "status": "unaffected" } ] }, { "version": "5.1", "status": "affected", "versionType": "custom", "lessThanOrEqual": "5.1.24", "changes": [ { "at": "5.1.25", "status": "unaffected" } ] }, { "version": "5.0", "status": "affected", "versionType": "custom", "lessThanOrEqual": "5.0.27", "changes": [ { "at": "5.0.28", "status": "unaffected" } ] }, { "version": "4.9", "status": "affected", "versionType": "custom", "lessThanOrEqual": "4.9.31", "changes": [ { "at": "4.9.32", "status": "unaffected" } ] }, { "version": "4.8", "status": "affected", "versionType": "custom", "lessThanOrEqual": "4.8.30", "changes": [ { "at": "4.8.31", "status": "unaffected" } ] }, { "version": "4.7", "status": "affected", "versionType": "custom", "lessThanOrEqual": "4.7.35", "changes": [ { "at": "4.7.36", "status": "unaffected" } ] } ] } ] } } }