CVE-2026-114570

{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2026-114570", "assignerOrgId": "b15e7b5b-3da4-40ae-a43c-f7aa60e62599", "state": "PUBLISHED", "assignerShortName": "Wordfence", "dateReserved": "2026-10-21T17:26:07.316Z", "datePublished": "2026-10-22T05:29:48.488Z", "dateUpdated": "2026-10-22T19:10:33.995Z"}, "containers": {"cna": {"providerMetadata": {"orgId": "b15e7b5b-3da4-40ae-a43c-f7aa60e62599", "shortName": "Wordfence", "dateUpdated": "2026-10-22T05:29:48.488Z"}, "affected": [{"vendor": "WordPress Foundation", "product": "WordPress", "versions": [{"version": "4.7.0", "status": "affected", "lessThanOrEqual": "4.7.33", "versionType": "semver"}, {"version": "4.8.0", "status": "affected", "lessThanOrEqual": "4.8.28", "versionType": "semver"}, {"version": "4.9.0", "status": "affected", "lessThanOrEqual": "4.9.29", "versionType": "semver"}, {"version": "5.0.0", "status": "affected", "lessThanOrEqual": "5.0.25", "versionType": "semver"}, {"version": "5.1.0", "status": "affected", "lessThanOrEqual": "5.1.22", "versionType": "semver"}, {"version": "5.2.0", "status": "affected", "lessThanOrEqual": "5.2.24", "versionType": "semver"}, {"version": "5.3.0", "status": "affected", "lessThanOrEqual": "5.3.21", "versionType": "semver"}, {"version": "5.4.0", "status": "affected", "lessThanOrEqual": "5.4.19", "versionType": "semver"}, {"version": "5.5.0", "status": "affected", "lessThanOrEqual": "5.5.18", "versionType": "semver"}, {"version": "5.6.0", "status": "affected", "lessThanOrEqual": "5.6.17", "versionType": "semver"}, {"version": "5.7.0", "status": "affected", "lessThanOrEqual": "5.7.15", "versionType": "semver"}, {"version": "5.8.0", "status": "affected", "lessThanOrEqual": "5.8.13", "versionType": "semver"}, {"version": "5.9.0", "status": "affected", "lessThanOrEqual": "5.9.13", "versionType": "semver"}, {"version": "6.0.0", "status": "affected", "lessThanOrEqual": "6.0.12", "versionType": "semver"}, {"version": "6.1.0", "status": "affected", "lessThanOrEqual": "6.1.10", "versionType": "semver"}, {"version": "6.2.0", "status": "affected", "lessThanOrEqual": "6.2.9", "versionType": "semver"}, {"version": "6.3.0", "status": "affected", "lessThanOrEqual": "6.3.8", "versionType": "semver"}, {"version": "6.4.0", "status": "affected", "lessThanOrEqual": "6.4.8", "versionType": "semver"}, {"version": "6.5.0", "status": "affected", "lessThanOrEqual": "6.5.8", "versionType": "semver"}, {"version": "6.6.0", "status": "affected", "lessThanOrEqual": "6.6.5", "versionType": "semver"}, {"version": "6.7.0", "status": "affected", "lessThanOrEqual": "6.7.5", "versionType": "semver"}, {"version": "6.8.0", "status": "affected", "lessThanOrEqual": "6.8.6", "versionType": "semver"}, {"version": "6.9.0", "status": "affected", "lessThanOrEqual": "6.9.5", "versionType": "semver"}, {"version": "7.0.0", "status": "affected", "lessThanOrEqual": "7.0.2", "versionType": "semver"}], "defaultStatus": "unaffected"}], "descriptions": [{"lang": "en", "value": "WordPress Core is vulnerable to Stored Cross-Site Scripting via Quick Edit in all versions up to, and including, 7.0.2 due to insufficient escaping of user display names. This makes it possible for authenticated attackers, with Contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a higher privileged user accesses the affected administrative screens. This issue only affects sites with a large number of users."}], "title": "WordPress Core <= 7.0.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Quick Edit", "references": [{"url": "https://www.wordfence.com/threat-intel/vulnerabilities/id/92babbbf-74bd-474f-9057-c5022a7d64c7?source=cve"}, {"url": "https://wordpress.org/news/2026/08/wordpress-7-0-3-release/"}, {"url": "https://core.trac.wordpress.org/changeset/63061"}], "problemTypes": [{"descriptions": [{"lang": "en", "description": "CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')", "cweId": "CWE-79", "type": "CWE"}]}], "metrics": [{"cvssV3_1": {"version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:L/I:L/A:N", "baseScore": 4.9, "baseSeverity": "MEDIUM"}}], "credits": [{"lang": "en", "type": "finder", "value": "moochi"}, {"lang": "en", "type": "finder", "value": "mappymappy"}], "timeline": [{"time": "2026-08-08T00:00:00.000Z", "lang": "en", "value": "Disclosed"}]}, "adp": [{"metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2026-114570", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "version": "2.0.3", "timestamp": "2026-10-22T13:33:19.865820Z"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-10-22T19:10:33.995Z"}}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2026-114570", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "version": "2.0.3", "timestamp": "2026-10-22T13:33:19.865820Z"}}}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-10-22T19:00:26.967Z"}}], "cna": {"title": "WordPress Core <= 7.0.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Quick Edit", "credits": [{"lang": "en", "type": "finder", "value": "moochi"}, {"lang": "en", "type": "finder", "value": "mappymappy"}], "metrics": [{"cvssV3_1": {"version": "3.1", "baseScore": 4.9, "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:L/I:L/A:N"}}], "affected": [{"vendor": "WordPress Foundation", "product": "WordPress", "versions": [{"status": "affected", "version": "4.7.0", "versionType": "semver", "lessThanOrEqual": "4.7.33"}, {"status": "affected", "version": "4.8.0", "versionType": "semver", "lessThanOrEqual": "4.8.28"}, {"status": "affected", "version": "4.9.0", "versionType": "semver", "lessThanOrEqual": "4.9.29"}, {"status": "affected", "version": "5.0.0", "versionType": "semver", "lessThanOrEqual": "5.0.25"}, {"status": "affected", "version": "5.1.0", "versionType": "semver", "lessThanOrEqual": "5.1.22"}, {"status": "affected", "version": "5.2.0", "versionType": "semver", "lessThanOrEqual": "5.2.24"}, {"status": "affected", "version": "5.3.0", "versionType": "semver", "lessThanOrEqual": "5.3.21"}, {"status": "affected", "version": "5.4.0", "versionType": "semver", "lessThanOrEqual": "5.4.19"}, {"status": "affected", "version": "5.5.0", "versionType": "semver", "lessThanOrEqual": "5.5.18"}, {"status": "affected", "version": "5.6.0", "versionType": "semver", "lessThanOrEqual": "5.6.17"}, {"status": "affected", "version": "5.7.0", "versionType": "semver", "lessThanOrEqual": "5.7.15"}, {"status": "affected", "version": "5.8.0", "versionType": "semver", "lessThanOrEqual": "5.8.13"}, {"status": "affected", "version": "5.9.0", "versionType": "semver", "lessThanOrEqual": "5.9.13"}, {"status": "affected", "version": "6.0.0", "versionType": "semver", "lessThanOrEqual": "6.0.12"}, {"status": "affected", "version": "6.1.0", "versionType": "semver", "lessThanOrEqual": "6.1.10"}, {"status": "affected", "version": "6.2.0", "versionType": "semver", "lessThanOrEqual": "6.2.9"}, {"status": "affected", "version": "6.3.0", "versionType": "semver", "lessThanOrEqual": "6.3.8"}, {"status": "affected", "version": "6.4.0", "versionType": "semver", "lessThanOrEqual": "6.4.8"}, {"status": "affected", "version": "6.5.0", "versionType": "semver", "lessThanOrEqual": "6.5.8"}, {"status": "affected", "version": "6.6.0", "versionType": "semver", "lessThanOrEqual": "6.6.5"}, {"status": "affected", "version": "6.7.0", "versionType": "semver", "lessThanOrEqual": "6.7.5"}, {"status": "affected", "version": "6.8.0", "versionType": "semver", "lessThanOrEqual": "6.8.6"}, {"status": "affected", "version": "6.9.0", "versionType": "semver", "lessThanOrEqual": "6.9.5"}, {"status": "affected", "version": "7.0.0", "versionType": "semver", "lessThanOrEqual": "7.0.2"}], "defaultStatus": "unaffected"}], "timeline": [{"lang": "en", "time": "2026-08-08T00:00:00.000Z", "value": "Disclosed"}], "references": [{"url": "https://www.wordfence.com/threat-intel/vulnerabilities/id/92babbbf-74bd-474f-9057-c5022a7d64c7?source=cve"}, {"url": "https://wordpress.org/news/2026/08/wordpress-7-0-3-release/"}, {"url": "https://core.trac.wordpress.org/changeset/63061"}], "descriptions": [{"lang": "en", "value": "WordPress Core is vulnerable to Stored Cross-Site Scripting via Quick Edit in all versions up to, and including, 7.0.2 due to insufficient escaping of user display names. This makes it possible for authenticated attackers, with Contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a higher privileged user accesses the affected administrative screens. This issue only affects sites with a large number of users."}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-79", "description": "CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')"}]}], "providerMetadata": {"orgId": "b15e7b5b-3da4-40ae-a43c-f7aa60e62599", "shortName": "Wordfence", "dateUpdated": "2026-10-22T05:29:48.488Z"}}}, "cveMetadata": {"cveId": "CVE-2026-114570", "state": "PUBLISHED", "dateUpdated": "2026-10-22T19:10:33.995Z", "dateReserved": "2026-10-21T17:26:07.316Z", "assignerOrgId": "b15e7b5b-3da4-40ae-a43c-f7aa60e62599", "datePublished": "2026-10-22T05:29:48.488Z", "assignerShortName": "Wordfence"}, "dataVersion": "5.2"}

{"affected": [{"affectedData": [{"defaultStatus": "unaffected", "product": "WordPress", "vendor": "WordPress Foundation", "versions": [{"lessThanOrEqual": "4.7.33", "status": "affected", "version": "4.7.0", "versionType": "semver"}, {"lessThanOrEqual": "4.8.28", "status": "affected", "version": "4.8.0", "versionType": "semver"}, {"lessThanOrEqual": "4.9.29", "status": "affected", "version": "4.9.0", "versionType": "semver"}, {"lessThanOrEqual": "5.0.25", "status": "affected", "version": "5.0.0", "versionType": "semver"}, {"lessThanOrEqual": "5.1.22", "status": "affected", "version": "5.1.0", "versionType": "semver"}, {"lessThanOrEqual": "5.2.24", "status": "affected", "version": "5.2.0", "versionType": "semver"}, {"lessThanOrEqual": "5.3.21", "status": "affected", "version": "5.3.0", "versionType": "semver"}, {"lessThanOrEqual": "5.4.19", "status": "affected", "version": "5.4.0", "versionType": "semver"}, {"lessThanOrEqual": "5.5.18", "status": "affected", "version": "5.5.0", "versionType": "semver"}, {"lessThanOrEqual": "5.6.17", "status": "affected", "version": "5.6.0", "versionType": "semver"}, {"lessThanOrEqual": "5.7.15", "status": "affected", "version": "5.7.0", "versionType": "semver"}, {"lessThanOrEqual": "5.8.13", "status": "affected", "version": "5.8.0", "versionType": "semver"}, {"lessThanOrEqual": "5.9.13", "status": "affected", "version": "5.9.0", "versionType": "semver"}, {"lessThanOrEqual": "6.0.12", "status": "affected", "version": "6.0.0", "versionType": "semver"}, {"lessThanOrEqual": "6.1.10", "status": "affected", "version": "6.1.0", "versionType": "semver"}, {"lessThanOrEqual": "6.2.9", "status": "affected", "version": "6.2.0", "versionType": "semver"}, {"lessThanOrEqual": "6.3.8", "status": "affected", "version": "6.3.0", "versionType": "semver"}, {"lessThanOrEqual": "6.4.8", "status": "affected", "version": "6.4.0", "versionType": "semver"}, {"lessThanOrEqual": "6.5.8", "status": "affected", "version": "6.5.0", "versionType": "semver"}, {"lessThanOrEqual": "6.6.5", "status": "affected", "version": "6.6.0", "versionType": "semver"}, {"lessThanOrEqual": "6.7.5", "status": "affected", "version": "6.7.0", "versionType": "semver"}, {"lessThanOrEqual": "6.8.6", "status": "affected", "version": "6.8.0", "versionType": "semver"}, {"lessThanOrEqual": "6.9.5", "status": "affected", "version": "6.9.0", "versionType": "semver"}, {"lessThanOrEqual": "7.0.2", "status": "affected", "version": "7.0.0", "versionType": "semver"}]}], "source": "security@wordfence.com"}], "cveTags": [], "descriptions": [{"lang": "en", "value": "WordPress Core is vulnerable to Stored Cross-Site Scripting via Quick Edit in all versions up to, and including, 7.0.2 due to insufficient escaping of user display names. This makes it possible for authenticated attackers, with Contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a higher privileged user accesses the affected administrative screens. This issue only affects sites with a large number of users."}], "id": "CVE-2026-114570", "lastModified": "2026-10-22T19:17:37.417", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "HIGH", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 4.9, "baseSeverity": "MEDIUM", "confidentialityImpact": "LOW", "integrityImpact": "LOW", "privilegesRequired": "LOW", "scope": "CHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:L/I:L/A:N", "version": "3.1"}, "exploitabilityScore": 1.8, "impactScore": 2.7, "source": "security@wordfence.com", "type": "Secondary"}], "ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2026-114570", "options": [{"exploitation": "none"}, {"automatable": "no"}, {"technicalImpact": "partial"}], "role": "CISA Coordinator", "timestamp": "2026-10-22T13:33:19.865820Z", "version": "2.0.3"}}]}, "published": "2026-10-22T06:17:14.437", "references": [{"source": "security@wordfence.com", "url": "https://core.trac.wordpress.org/changeset/63061"}, {"source": "security@wordfence.com", "url": "https://wordpress.org/news/2026/08/wordpress-7-0-3-release/"}, {"source": "security@wordfence.com", "url": "https://www.wordfence.com/threat-intel/vulnerabilities/id/92babbbf-74bd-474f-9057-c5022a7d64c7?source=cve"}], "sourceIdentifier": "security@wordfence.com", "vulnStatus": "Deferred", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-79"}], "source": "security@wordfence.com", "type": "Secondary"}]}

{"bugzilla": {"description": "wordpress: WordPress: Stored Cross-Site Scripting via unescaped display names in Quick Edit", "id": "2558765", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2558765"}, "csaw": false, "cvss3": {"cvss3_base_score": "4.9", "cvss3_scoring_vector": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:L/I:L/A:N", "status": "draft"}, "cwe": "CWE-79", "details": ["A flaw was found in WordPress. Insufficient escaping of user display names in the Quick Edit feature allows an authenticated user with contributor-level privileges to conduct stored Cross-Site Scripting (XSS) attacks. By submitting malicious scripts, an attacker can cause them to execute within the session of an administrator who views the affected administrative screens, potentially leading to unauthorized administrative actions or session compromise."], "name": "CVE-2026-114570", "public_date": "2026-10-22T05:29:48Z", "references": ["https://www.cve.org/CVERecord?id=CVE-2026-114570\nhttps://nvd.nist.gov/vuln/detail/CVE-2026-114570\nhttps://core.trac.wordpress.org/changeset/63061\nhttps://wordpress.org/news/2026/08/wordpress-7-0-3-release/\nhttps://www.wordfence.com/threat-intel/vulnerabilities/id/92babbbf-74bd-474f-9057-c5022a7d64c7?source=cve"], "statement": "This vulnerability is rated as having a Moderate severity for Red Hat community distributions because successful exploitation requires authenticated access with contributor privileges or higher, preventing unauthenticated remote abuse. WordPress is not distributed in core Red Hat Enterprise Linux products, being available only through community channels such as EPEL and Fedora. The impact is limited to deployments with large user directories where high-privilege administrators interact with quick-edit management interfaces.", "threat_severity": "Moderate"}

{"affected": [{"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "[4.7.0,4.7.33]"}}, {"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "[4.8.0,4.8.28]"}}, {"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "[4.9.0,4.9.29]"}}, {"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "[5.0.0,5.0.25]"}}, {"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "[5.1.0,5.1.22]"}}, {"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "[5.2.0,5.2.24]"}}, {"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "[5.3.0,5.3.21]"}}, {"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "[5.4.0,5.4.19]"}}, {"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "[5.5.0,5.5.18]"}}, {"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "[5.6.0,5.6.17]"}}, {"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "[5.7.0,5.7.15]"}}, {"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "[5.8.0,5.8.13]"}}, {"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "[5.9.0,5.9.13]"}}, {"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "[6.0.0,6.0.12]"}}, {"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "[6.1.0,6.1.10]"}}, {"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "[6.2.0,6.2.9]"}}, {"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "[6.3.0,6.3.8]"}}, {"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "[6.4.0,6.4.8]"}}, {"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "[6.5.0,6.5.8]"}}, {"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "[6.6.0,6.6.5]"}}, {"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "[6.7.0,6.7.5]"}}, {"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "[6.8.0,6.8.6]"}}, {"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "[6.9.0,6.9.5]"}}, {"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "[7.0.0,7.0.2]"}}], "enrichment": {"confidence": 100.0, "confidence_source": "manual", "scores": [{"score": 100.0, "source": "manual"}]}, "original": {"product": "WordPress", "source": "cna", "vendor": "WordPress Foundation"}, "product": "wordpress", "vendor": "wordpress"}], "created": "2026-10-22T07:15:14.836115+00:00", "updated": "2026-10-22T09:06:11.223112+00:00", "vendors": ["wordpress", "wordpress$PRODUCT$wordpress"]}