CVE-2026-39727
WordPress WC Fields Factory plugin <= 4.1.12 - Cross Site Scripting (XSS) vulnerability
Subscriber Cross Site Scripting (XSS) in WC Fields Factory <= 4.1.12 versions.
CVSS 3.1 · 6.5 Medium
EPSS < 1%
KEV · Not listed
Vendors
Products