CVE-2026-57762 - WordPress Simple URLs plugin <= 151 - Cross Site Scripting (XSS) vulnerability

Back Back to CVE browser

MEDIUM

WordPress Simple URLs plugin <= 151 - Cross Site Scripting (XSS) vulnerability

Published Jul 2, 2026

5.9

MEDIUM

CVSS 3.1

EPSS 0.24%

Description

Author Cross Site Scripting (XSS) in Simple URLs <= 151 versions.

Affected products

Vendor Andrew Fiebert Product Simple URLs Default
unaffected
- Version
  -
  Status
  affected
  Constraints
  <=151

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

Andrew Fiebert

Simple URLs

unaffected

Version	Status	Constraints
-	affected	<=151

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-79

Cross-site Scripting (XSS)

References (1)

https://patchstack.com/database/wordpress/plugin/simple-urls/vulnerability/wordpress-simple-urls-plugin-151-cross-site-scripting-xss-vulnerability?_s_id=cve
vdb-entry

Link	Providers	Tags
https://patchstack.com/database/wordpress/plugin/simple-urls/vulnerability/wordpress-simple-urls-plugin-151-cross-site-scripting-xss-vulnerability?_s_id=cve		vdb-entry

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner Patchstack

Published Jul 2, 2026

Updated Jul 2, 2026

Reserved Jun 25, 2026

Link CVE-2026-57762

CISA Vulnrichment

Updated Jul 2, 2026

NVD

Status Deferred

Modified Jul 2, 2026

Link CVE-2026-57762

Red Hat

Severity n/a

Public date n/a

Links CVE-2026-57762