CVE-2026-9629

MediumCVSS 6.4/10Last modified Jul 23, 2026

Description

The Canvas plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'tag' parameter in all versions up to, and including, 2.5.2 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.

Metrics

CVSS 3.1 6.4/10CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N

Weakness enumeration

CWE-79

Affected software

No affected versions have been published.

Timeline

Published
Jun 13, 2026
Last modified
Jul 23, 2026
NVD status
Deferred

Related CVEs from 2026

CVE-2026-962928.2Inefficient regular expression complexity, Inefficient Algorithmic Complexity vulnerability in Apache Thrift Lua bindings. This issue affCVE-2026-962936.9A cleartext storage of sensitive information vulnerability in WatchGuard Endpoint Security's Full Disk Encryption feature for macOS allows aCVE-2026-962948.7Uncaught exception, Improper Handling of Exceptional Conditions vulnerability in Apache Thrift NodeJS bindings. This issue affects ApacheCVE-2026-962976.5Use of freed memory in the aggregation feature of MongoDB Server can cause the server to read data from a memory area after it has been releCVE-2026-962996.5A security issue was discovered in MongoDB mongos (the sharded cluster router) where an authenticated user with readWrite privileges could cCVE-2026-963005.9Uncontrolled resource consumption in RPC Endpoint Mapper Service allows an unauthorized attacker to deny service over a network.CVE-2026-963017.0Use after free in Windows USB Print Driver allows an authorized attacker to elevate privileges locally.CVE-2026-963027.0Use after free in Windows Installer allows an authorized attacker to elevate privileges locally.CVE-2026-963036.5Improperly implemented security check for standard in Microsoft PowerShell allows an unauthorized attacker to bypass a security feature overCVE-2026-963047.0Use after free in Windows USB Print Driver allows an authorized attacker to elevate privileges locally.CVE-2026-963057.0Use after free in Windows Installer allows an authorized attacker to elevate privileges locally.CVE-2026-963067.8Out-of-bounds read in Windows Sysmain Service allows an authorized attacker to elevate privileges locally.