Skip to content
OpenAdvisories

Product · Liquid Web / StellarWP

WPComplete

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • High 7.1
    CVE-2026-66479

    WordPress WPComplete plugin <= 2.9.5.6 - CSRF to Stored XSS vulnerability

    Cross-Site Request Forgery (CSRF) vulnerability in Liquid Web / StellarWP WPComplete wpcomplete allows Stored XSS.This issue affects WPComplete: from n/a through 2.9.5.6.

    Liquid Web / StellarWP WPComplete
  • High 7.1
    CVE-2026-66599

    WordPress WPComplete plugin <= 2.9.5.6 - Cross Site Scripting (XSS) vulnerability

    Unauthenticated Cross Site Scripting (XSS) in WPComplete <= 2.9.5.6 versions.

    Liquid Web / StellarWP WPComplete