← All advisories

Unrated severityNVD Advisory· Published Jun 26, 2026· Updated Jun 26, 2026

WordPress Neve PRO theme <= 3.1.2 - Cross Site Scripting (XSS) vulnerability

CVE-2026-57618

Description

Contributor Cross Site Scripting (XSS) in Neve PRO <= 3.1.2 versions.

Affected products

2

WordPress/Neve Pro Addoninferred
Range: <=3.1.2
Package: https://wordpress.org/plugins/neve-pro-addon
WordPress/Neve PROllm-create
Range: <=3.1.2

Patches

Vulnerability mechanics

References

1

patchstack.com/database/wordpress/theme/neve-pro-addon/vulnerability/wordpress-neve-pro-theme-3-1-2-cross-site-scripting-xss-vulnerabilitymitrevdb-entry

News mentions

0

No linked articles in our index yet.