All vulnerabilities

WordPress core

GHSA-wjwj-p342-9fq7

An issue allowing post content to shadow Script Module data with a matching element ID

Severity
Medium
Published
29 Oct 2026
Last changed
29 Oct 2026
Added to UpHeron
30 Oct 2026
Fixed in
6.6.11, 6.7.11, 6.8.12, 6.9.11, 7.0.8, 7.1.4
Sources
WordPress

Affected software

SoftwareAffected versions
WordPressWordPress core · cpe:a:wordpress:wordpress
  • From 6.6.0 before 6.6.11
  • From 6.7.0 before 6.7.11
  • From 6.8.0 before 6.8.12
  • From 6.9.0 before 6.9.11
  • From 7.0.0 before 7.0.8
  • From 7.1.0 before 7.1.4

References