wpweaver CVE debriefs

These pages are published after PatchSiren validates generated defensive summaries against stored public CVE and source evidence.

MEDIUM wpweaver CVE published 2026-10-13

CVE-2026-54870

A Cross Site Scripting (XSS) vulnerability exists in the WordPress Weaver Xtreme theme Support plugin versions up to 7.0.1. This issue allows for Stored XSS, potentially enabling attackers to inject malicious scripts into web pages. The vulnerability is identified as CVE-2026-54870 and affects the Weaver Xtreme Theme Support plugin. Defenders and administrators of WordPress environments using this plugin [truncated]