Unrated severityNVD Advisory· Published Jul 23, 2026· Updated Jul 23, 2026
WordPress Hubbub Lite plugin <= 1.36.3 - Cross Site Scripting (XSS) vulnerability
CVE-2026-27403
Description
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in NerdPress Hubbub Lite allows Stored XSS.
This issue affects Hubbub Lite: from n/a through 1.36.3.
Affected products
1- Range: <=1.36.3
Patches
Vulnerability mechanics
References
1News mentions
1- Wordfence Intelligence Weekly WordPress Vulnerability Report (July 20, 2026 to July 26, 2026)Wordfence Blog · Jul 30, 2026