Skip to content
OpenAdvisories
Medium · 6.5 CVE-2025-26906 EUVD-2025-11120GHSA-cm3v-8rjf-ggr8

WordPress WP Delete User Accounts plugin <= 1.2.3 - Cross Site Scripting (XSS) vulnerability

Published Apr 15, 2025 · Updated Apr 28, 2026 · Assigned by Patchstack

Description

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Ren Ventura WP Delete User Accounts wp-delete-user-accounts allows DOM-Based XSS.This issue affects WP Delete User Accounts: from n/a through <= 1.2.3.

Affected products

VendorProductAffectedFixed
Ren Ventura WP Delete User Accounts ≤ 1.2.3 —

References