Live › vulnerability › CVE-2026-115957
Go to dashboardThe WP Discussion Board plugin for WordPress stores user input that is later rendered without proper neutralization, a stored cross-site scripting flaw. An attacker who can submit content can run script in the browser of other users who view the page, including administrators.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-28 13:33 UTC. All times on this page are UTC.
Sites running the WP Discussion Board WordPress plugin at version 2.6.0 or earlier are affected. Sites without this plugin installed can skip it. Whether anonymous visitors can submit content that triggers the flaw is unknown from the sources.
No product ranges from the sources yet.
wp-content/plugins/wp-discussion-board/2.6.0: the fixed version is unknown from the sourcesEach row is the first time that source carried this signal. The analyst’s rows are its own findings.
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WP Discussion Board WP Discussion Board wp-discussion-board allows Stored XSS.This issue affects WP Discussion Board: from n/a through 2.6.0.
This page as .md · .json · in your agent: get_signal("CVE-2026-115957")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.