TI-2026-36135 CVE-2026-48871 · GHSA-59gh-qc25-r9fj
WordPress MW WP Form plugin <= 5.1.3 - Cross Site Scripting (XSS) vulnerability
Priority LOW 31
Unauthenticated Cross Site Scripting (XSS) in MW WP Form <= 5.1.3 versions.
Takashi Kitajima
Records2All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high1CVSS 7.0–8.9
Exploited now
Takashi Kitajima records in CISA KEVNo Takashi Kitajima vulnerabilities are listed in CISA KEV.
Records
2 records
TI-2025-16212 CVE-2025-22308 · GHSA-wfgj-q84v-qhr5
WordPress Smart Custom FIelds plugin <= 5.0.0 - Cross Site Scripting (XSS) vulnerability
Priority LOW 29
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Takashi Kitajima Smart Custom Fields smart-custom-fields allows Stored XSS.This issue affects Smart Custom Fields: fro…