← All advisories

Unrated severityNVD Advisory· Published Jul 2, 2026· Updated Jul 2, 2026

WordPress Automotive Listings plugin <= 18.6 - Reflected Cross Site Scripting (XSS) vulnerability

CVE-2026-27425

Description

Unauthenticated Cross Site Scripting (XSS) in Automotive Listings <= 18.6 versions.

Affected products

1

WordPress/Automotive Listingsllm-fuzzy
Range: <=18.6

Patches

Vulnerability mechanics

References

1

patchstack.com/database/wordpress/plugin/automotive/vulnerability/wordpress-automotive-listings-plugin-18-6-reflected-cross-site-scripting-xss-vulnerabilitymitrevdb-entry

News mentions

0

No linked articles in our index yet.