CVE-2026-94081

WordPress versions up to 3.1.3 are vulnerable to an unauthenticated Cross Site Scripting (XSS) flaw in the Persistent Login feature, allowing attackers to inject malicious scripts that can execute in the context of a user's session. This vulnerability poses a high risk as it can lead to session hijacking and unauthorized access to sensitive user data. Site administrators and security teams managing affected WordPress installations should prioritize patching this vulnerability to mitigate potential exploitation.