CVE-2026-93485
EUVD-2026-8265718.09.2026, 06:16
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Automattic WordPress wordpress allows DOM-Based XSS.This issue affects WordPress: from n/a through 7.1.Early Detection
Affected products identified ahead of NVD analysis through intelligence sources
(CNA/ADP records, vendor advisories, Enginsight analysis).
| Vendor | Product | Version | Source |
|---|---|---|---|
| wordpress | wordpress | 7.1 ≤ 𝑥 < 7.1.1 | ENGINSIGHT |
| wordpress | wordpress | 7.0 ≤ 𝑥 < 7.0.5 | ENGINSIGHT |
| wordpress | wordpress | 6.9 ≤ 𝑥 < 6.9.8 | ENGINSIGHT |
| wordpress | wordpress | 6.8 ≤ 𝑥 < 6.8.9 | ENGINSIGHT |
| wordpress | wordpress | 6.7 ≤ 𝑥 < 6.7.8 | ENGINSIGHT |
| wordpress | wordpress | 6.6 ≤ 𝑥 < 6.6.8 | ENGINSIGHT |
| wordpress | wordpress | 6.5 ≤ 𝑥 < 6.5.11 | ENGINSIGHT |
| wordpress | wordpress | 6.4 ≤ 𝑥 < 6.4.11 | ENGINSIGHT |
| wordpress | wordpress | 6.3 ≤ 𝑥 < 6.3.11 | ENGINSIGHT |
| wordpress | wordpress | 6.2 ≤ 𝑥 < 6.2.12 | ENGINSIGHT |
| wordpress | wordpress | 6.1 ≤ 𝑥 < 6.1.13 | ENGINSIGHT |
| wordpress | wordpress | 6.0 ≤ 𝑥 < 6.0.15 | ENGINSIGHT |
| wordpress | wordpress | 5.9 ≤ 𝑥 < 5.9.17 | ENGINSIGHT |
| wordpress | wordpress | 5.8 ≤ 𝑥 < 5.8.16 | ENGINSIGHT |
| wordpress | wordpress | 5.7 ≤ 𝑥 < 5.7.18 | ENGINSIGHT |
| wordpress | wordpress | 5.6 ≤ 𝑥 < 5.6.20 | ENGINSIGHT |
| wordpress | wordpress | 5.5 ≤ 𝑥 < 5.5.21 | ENGINSIGHT |
| wordpress | wordpress | 5.4 ≤ 𝑥 < 5.4.22 | ENGINSIGHT |
| wordpress | wordpress | 5.3 ≤ 𝑥 < 5.3.24 | ENGINSIGHT |
| wordpress | wordpress | 5.2 ≤ 𝑥 < 5.2.27 | ENGINSIGHT |
| wordpress | wordpress | 5.1 ≤ 𝑥 < 5.1.25 | ENGINSIGHT |
| wordpress | wordpress | 5.0 ≤ 𝑥 < 5.0.28 | ENGINSIGHT |
| wordpress | wordpress | 4.9 ≤ 𝑥 < 4.9.32 | ENGINSIGHT |
| wordpress | wordpress | 4.8 ≤ 𝑥 < 4.8.31 | ENGINSIGHT |
| wordpress | wordpress | 4.7 ≤ 𝑥 < 4.7.36 | ENGINSIGHT |
Debian Releases
Ubuntu Releases