UpHeron
All vulnerabilities

WordPress core

GHSA-j255-3x8q-7q7g

A Contributor+ stored cross-site scripting (XSS) issue in the labels of the Comments Pagination and Post Navigation Link blocks

Severity
Medium
Published
29 Oct 2026
Last changed
29 Oct 2026
Added to UpHeron
30 Oct 2026
Fixed in
6.6.11, 6.7.11, 6.8.12, 6.9.11, 7.0.8, 7.1.4
Sources
WordPress

Affected software

SoftwareAffected versions
WordPressWordPress core · cpe:a:wordpress:wordpress
  • From 7.1.0 before 7.1.4
  • From 7.0.0 before 7.0.8
  • From 6.9.0 before 6.9.11
  • From 6.8.0 before 6.8.12
All 13 release lines
  • From 5.9.0 before 5.9.20
  • From 6.0.0 before 6.0.18
  • From 6.1.0 before 6.1.16
  • From 6.2.0 before 6.2.15
  • From 6.3.0 before 6.3.14
  • From 6.4.0 before 6.4.14
  • From 6.5.0 before 6.5.14
  • From 6.6.0 before 6.6.11
  • From 6.7.0 before 6.7.11
  • From 6.8.0 before 6.8.12
  • From 6.9.0 before 6.9.11
  • From 7.0.0 before 7.0.8
  • From 7.1.0 before 7.1.4

References