SEPTEMBER 20, 2026
Live Feed
Back to database
Case File

CVE-2026-78563

UNKNOWN · CVSS N/A

Source: NVD + CISA KEV + EPSS · Published 2026-08-25 · Last synced 2026-09-20

CyberRota Analysis

AI-Generated

The NotificationX Pro plugin for WordPress is susceptible to Stored Cross-Site Scripting due to inadequate input sanitization and output escaping, affecting all versions up to 3.1.4. This vulnerability allows unauthenticated attackers to inject malicious scripts that execute when users visit compromised pages, potentially leading to data theft or session hijacking. WordPress site administrators using this plugin should prioritize immediate updates to mitigate the risk.

CVE
CVE-2026-78563
Severity
UNKNOWN
CVSS
N/A
EPSS
N/A

Original NVD Description

Rejected reason: ** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. Reason: This candidate was issued in error. Notes: All references and descriptions in this candidate have been removed to prevent accidental usage.