← All advisories

Unrated severityNVD Advisory· Published Jun 26, 2026· Updated Jun 26, 2026

WordPress perfmatters plugin <= 2.6.3 - Reflected Cross Site Scripting (XSS) vulnerability

CVE-2026-56047

Description

Unauthenticated Cross Site Scripting (XSS) in perfmatters <= 2.6.3 versions.

Affected products

1

WordPress/Perfmattersllm-fuzzy
Range: <=2.6.3
Package: https://wordpress.org/plugins/perfmatters

Patches

Vulnerability mechanics

References

1

patchstack.com/database/wordpress/plugin/perfmatters/vulnerability/wordpress-perfmatters-plugin-2-6-3-reflected-cross-site-scripting-xss-vulnerabilitymitrevdb-entry

News mentions

0

No linked articles in our index yet.