High · 7.1 CVE-2026-56039 EUVD-2026-39701GHSA-cx36-2wx4-c9rp

WordPress Quick Interest Slider plugin <= 3.1.6 - Reflected Cross Site Scripting (XSS) vulnerability

Published Jun 26, 2026 · Updated Jun 26, 2026 · Assigned by Patchstack

Vendor: WordPress.com Product: Quick Interest Slider

Description

Unauthenticated Cross Site Scripting (XSS) in Quick Interest Slider <= 3.1.6 versions.

Affected products

Vendor	Product	Affected	Fixed
WordPress.com	Quick Interest Slider	≤ 3.1.6	—

References

https://patchstack.com/database/wordpress/plugin/quick-interest-slider/vulnerability/wordpress-quick-interest-slider-plugin-3-1-6-reflected-cross-site-scripting-xss-vulnerability?_s_id=cve vdb-entry