CVE-2026-115498

The Slim Jetpack plugin for WordPress (versions up to and including 2.7.0.1 ) is vulnerable to Stored Cross-Site Scripting (XSS) . The flaw exists in the g-website (Website contact-field) parameter due to insufficient input sanitization and output escaping. Because nonce and authentication checks...

EUVD-2026-116807

The Slim Jetpack plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'g-website Website contact-field' parameter in all versions up to, and including, 2.7.0.1 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to...

WordPress Slim Jetpack plugin <= 2.7.0.1 - Unauthenticated Stored Cross-Site Scripting vulnerability

Unauthenticated Stored Cross-Site Scripting vulnerability discovered by Yaniv Haliwa in WordPress Plugin Slim Jetpack versions = 2.7.0.1...