CVE-2026-39693 fesomia CVE debrief

Who should care

Users of FSM Custom Featured Image Caption plugin versions from n/a through <= 1.25.1 should be aware of this Cross-site Scripting vulnerability. Operators, administrators, and security teams responsible for maintaining and securing WordPress installations with this plugin should review and address this vulnerability.

Technical summary

The FSM Custom Featured Image Caption plugin is vulnerable to Cross-site Scripting due to improper neutralization of input during web page generation. This issue has been assigned a CVSS score of 5.9 and a severity of MEDIUM. Affected users should prioritize patching or mitigating this vulnerability to prevent potential DOM-Based XSS attacks. The vulnerability affects versions from n/a through <= 1.25.1, and users should review official advisories for mitigation guidance.

Defensive priority

Medium priority due to CVSS score of 5.9 and potential impact on user interactions

Recommended defensive actions

• Inventory and verify FSM Custom Featured Image Caption plugin versions
• Apply patches or updates if available
• Monitor for suspicious activity
• Consider compensating controls
• Review official advisories for mitigation guidance
• Track exceptions and retest remediated assets
• Review and verify affected scope with official sources

Evidence notes

Evidence is limited; verify vulnerability details with official sources. The CVE record was published on 2026-04-08T09:16:41.647Z and has not been modified since then. The NVD entry is currently Deferred. Limited source detail is available; defenders should verify affected scope and severity with official advisories and track vendor guidance.

Official resources