High · 7.1 CVE-2026-56047 EUVD-2026-39708GHSA-77r4-g858-h4qm

WordPress perfmatters plugin <= 2.6.3 - Reflected Cross Site Scripting (XSS) vulnerability

Published Jun 26, 2026 · Updated Jun 26, 2026 · Assigned by Patchstack

Description

Unauthenticated Cross Site Scripting (XSS) in perfmatters <= 2.6.3 versions.

Vendor	Product	Affected	Fixed
Perfmatters, Powered Kinsta + GeneratePress Docs Changelog Feature requests Legal Affiliate Contact	perfmatters	≤ 2.6.3	—