UpHeron
All vulnerabilities

WordPress core

GHSA-83c2-c4pc-wmp3

Contributor+ stored cross-site scripting (XSS) and denial of service issues in Interactivity API bindings

Severity
High
Published
29 Oct 2026
Last changed
29 Oct 2026
Added to UpHeron
30 Oct 2026
Fixed in
6.6.11, 6.7.11, 6.8.12, 6.9.11, 7.0.8, 7.1.4
Sources
WordPress

Affected software

SoftwareAffected versions
WordPressWordPress core · cpe:a:wordpress:wordpress
  • From 7.1.0 before 7.1.4
  • From 7.0.0 before 7.0.8
  • From 6.9.0 before 6.9.11
  • From 6.8.0 before 6.8.12
All 8 release lines
  • From 6.4.0 before 6.4.14
  • From 6.5.0 before 6.5.14
  • From 6.6.0 before 6.6.11
  • From 6.7.0 before 6.7.11
  • From 6.8.0 before 6.8.12
  • From 6.9.0 before 6.9.11
  • From 7.0.0 before 7.0.8
  • From 7.1.0 before 7.1.4

References