VYPR

Slim Jetpack

by WordPress

CVEs (1)

  • CVE-2026-115498HigNov 4, 2026
    risk 0.47cvss 7.2epss —

    The Slim Jetpack plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'g<PAGE_ID>-website (Website contact-field)' parameter in all versions up to, and including, 2.7.0.1 due to insufficient input sanitization and output escaping. This makes it possible for…