CVE-2026-81782

WP Docs versions up to 2.3.1 are vulnerable to a Subscriber Cross Site Scripting (XSS) flaw, allowing attackers to inject malicious scripts that could execute in the context of a user's browser. This vulnerability could lead to unauthorized actions on behalf of users or exposure of sensitive information. Website administrators using affected versions should prioritize patching to mitigate potential exploitation risks.