Skip to content
OpenAdvisories
Medium · 5.9 CVE-2026-39683 EUVD-2026-20369GHSA-77jh-75xf-5vr4

WordPress Garden Gnome Package plugin <= 2.4.1 - Cross Site Scripting (XSS) vulnerability

Published Apr 8, 2026 · Updated Apr 29, 2026 · Assigned by Patchstack

Description

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Chief Gnome Garden Gnome Package garden-gnome-package allows DOM-Based XSS.This issue affects Garden Gnome Package: from n/a through <= 2.4.1.

Affected products

VendorProductAffectedFixed
Chief Gnome Garden Gnome Package ≤ 2.4.1 —

References