TI-2026-07583 CVE-2026-8627 · GHSA-m24w-6mjv-3gj2
Correct Prices <= 1.0 - Reflected Cross-Site Scripting via PHP_SELF Parameter
Priority LOW 27
The Correct Prices plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the $_SERVER['PHP_SELF'] variable in versions up to and including 1.0.