Description
Unauthenticated Cross Site Scripting (XSS) in Aora <= 1.3.19 versions.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| thembay | Aora | ≤ 1.3.19 | — |
High · 7.1
CVE-2026-66612
EUVD-2026-63297GHSA-6jr8-4mj2-3p48
WordPress Aora theme <= 1.3.19 - Cross Site Scripting (XSS) vulnerability
Published Aug 20, 2026 · Updated Aug 20, 2026 · Assigned by Patchstack