WordPress Foundation CVE debriefs

These pages are published after PatchSiren validates generated defensive summaries against stored public CVE and source evidence.

MEDIUM WordPress Foundation CVE published 2026-10-22

CVE-2026-114570

CVE-2026-114570 is a Stored Cross-Site Scripting vulnerability in WordPress Core affecting versions up to 7.0.2. Authenticated attackers with Contributor-level access can inject web scripts via Quick Edit, which execute when higher-privileged users access affected administrative screens. This issue primarily affects sites with many users. The vulnerability allows attackers to inject arbitrary web scripts, [truncated]