First day on Intigriti: our agent harness found and proved a remote code execution bug in Odoo's program.

CVE-2026-57427

HighCVSS 7.1/10Last modified Oct 24, 2026

Description

Unauthenticated Cross Site Scripting (XSS) in Download Monitor - WPForms Lock <= 1.0.4 versions.

Metrics

CVSS 3.1 7.1/10CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L

Weakness enumeration

Affected software

Vendor	Product	Versions
Download Monitor	Download Monitor - WPForms Lock	<= 1.0.4

References

https://patchstack.com/database/wordpress/plugin/dlm-wpforms-lock/vulnerability/wordpress-download-monitor-wpforms-lock-plugin-1-0-4-cross-site-scripting-xss-vulnerability?_s_id=cve

Timeline

Published: Jul 23, 2026
Last modified: Oct 24, 2026
NVD status: Deferred

Related CVEs from 2026

CVE-2026-574287.1Unauthenticated Cross Site Scripting (XSS) in Sprout Clients <= 3.2.3 versions.CVE-2026-574296.5Contributor Broken Access Control in Slim SEO <= 4.6.2 versions.CVE-2026-57436.4The SimpLy Gallery Block & Lightbox plugin for WordPress is vulnerable to Stored Cross-Site Scripting via block attributes in all versions u CVE-2026-574304.3Contributor Broken Access Control in SEOPress PRO <= 9.1.1 versions.CVE-2026-574316.5Author Cross Site Scripting (XSS) in Featured Image <= 2.1 versions.CVE-2026-574328.4Perl versions before 5.40.5-RC1, from 5.41.0 before 5.42.3-RC1, from 5.43.0 before 5.43.11 have an integer overflow in S_measure_struct lead CVE-2026-574339.8Storable versions before 3.41 for Perl have a signed integer overflow when deserializing a crafted SX_HOOK record. retrieve_hook_common rea CVE-2026-574347.5Nokogiri is an open source XML and HTML library for the Ruby programming language. Prior to 1.19.4, Nokogiri contains a bug when calling cer CVE-2026-574357.5Nokogiri is an open source XML and HTML library for the Ruby programming language. Prior to 1.19.4, Nokogiri’s CRuby native extension could CVE-2026-574365.3Nokogiri is an open source XML and HTML library for the Ruby programming language. Prior to 1.19.4, Nokogiri::XML::Document#root= validated CVE-2026-574375.3Nokogiri is an open source XML and HTML library for the Ruby programming language. Prior to 1.19.4, Nokogiri::XML::XPathContext did not keep CVE-2026-574386.6Nokogiri is an open source XML and HTML library for the Ruby programming language. Prior to 1.19.4, XInclude substitution performed by Nokog

CVE-2026-57427: High severity, CVSS 7.1 | Vulnix