CVE · Medium

CVE-2026-2982 — Improper Neutralization of Input During Web Page Generation

CVE Vulnerability Type Severity Affected Fixed in Published Status
CVE-2026-2982 Improper Neutralization of Input During Web Page Generation Improper Neutralization of Input During Web Page Generation Medium 5.4 < 2.1.7 2.1.7 2026-11-12 —

CVE-2026-2982 is a Improper Neutralization of Input During Web Page Generation vulnerability in the WordPress plugin 3469639 (3469639). Versions up to and including 2.1.7 are affected; no patched version is recorded. CVSS score: 5.4 (Medium). Published 2026-11-12.

Scan your WordPress site free

No signup, no credit card — enter your URL and get a security report in seconds.