Skip to content
OpenAdvisories

Vendor

lykich

1 known vulnerabilities.

Products

Correct Prices 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 6.1
    CVE-2026-8627

    Correct Prices <= 1.0 - Reflected Cross-Site Scripting via PHP_SELF Parameter

    The Correct Prices plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the $_SERVER['PHP_SELF'] variable in versions up to and including 1.0. This is due to the correct_prices_page() function echoing $_SERVER['PHP_SELF'] into a form's act…

    lykich Correct Prices Web / CMS