← All advisories

Medium severity6.5NVD Advisory· Published Jun 26, 2026· Updated Jun 26, 2026

CVE-2026-57651

CVE-2026-57651

Description

Contributor Cross Site Scripting (XSS) in Ghost Kit <= 3.6.0 versions.

Affected products

2

WordPress/Ghostkitllm-fuzzy2 versions
<=3.6.0+ 1 more
- (no CPE)range: <=3.6.0
- (no CPE)range: <=3.6.0
Package: https://wordpress.org/plugins/ghostkit

Patches

Vulnerability mechanics

References

1

patchstack.com/database/wordpress/plugin/ghostkit/vulnerability/wordpress-ghost-kit-plugin-3-6-0-cross-site-scripting-xss-vulnerabilitynvd

News mentions

0

No linked articles in our index yet.