Medium · 5.9 CVE-2026-102384 EUVD-2026-89940GHSA-rrxv-wj2r-9r89

WordPress Supreme Modules Lite plugin <= 2.5.63 - Cross Site Scripting (XSS) vulnerability

Published Sep 30, 2026 · Updated Sep 30, 2026 · Assigned by Patchstack

Vendor: Supreme Modules Product: Supreme Modules Lite

Description

Author Cross Site Scripting (XSS) in Supreme Modules Lite <= 2.5.63 versions.

Affected products

Vendor	Product	Affected	Fixed
Supreme Modules	Supreme Modules Lite	≤ 2.5.63	—

References

https://patchstack.com/database/wordpress/plugin/supreme-modules-for-divi/vulnerability/wordpress-supreme-modules-lite-plugin-2-5-63-cross-site-scripting-xss-vulnerability?_s_id=cve vdb-entry