CVE-2026-66610

CVE-2026-66610 is an unauthenticated Cross-Site Scripting (XSS) vulnerability in the WordPress theme Urna , affecting versions ≤ 2.6.2 . The flaw was discovered by Khuong Hai & Thanh Nam (HPT Vietnam). The CVSS 3.1 score is 7.1 (HIGH) , with a network attack vector, low complexity, no privileges ...