CVE-2026-94684

View on CVE.org
Published Sep 23, 2026 CVSS n/a EPSS n/a KEV · Not listed
Description
This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. False positive detection.

Remediation

No solution or workaround provided in the CVE record

Tracking

Sign in to view the affected projects.

Advisories

No advisories available
References

No reference.

History
Type Values Removed Values Added
Title WordPress Ocean Extra plugin <= 2.6.1 - Cross Site Scripting (XSS) vulnerability
Weaknesses CWE-79
References
Metrics cvssV3_1

{'score': 6.5, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L'}

ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}
Type Values Removed Values Added
Description Contributor Cross Site Scripting (XSS) in Ocean Extra <= 2.6.1 versions. This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. False positive detection.
Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}
Type Values Removed Values Added
First Time appeared Oceanwp
Oceanwp ocean Extra
Wordpress
Wordpress wordpress
Vendors & Products Oceanwp
Oceanwp ocean Extra
Wordpress
Wordpress wordpress
Type Values Removed Values Added
Description Contributor Cross Site Scripting (XSS) in Ocean Extra <= 2.6.1 versions.
Title WordPress Ocean Extra plugin <= 2.6.1 - Cross Site Scripting (XSS) vulnerability
Weaknesses CWE-79
References
Metrics cvssV3_1

{'score': 6.5, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L'}
Weaknesses

No weakness.

Sources

Status
REJECTED
Assigner
Patchstack
Published
Updated
Oct 1, 2026, 9:43 AM
Reserved
Sep 22, 2026, 12:19 AM

View source JSON

Updated

JSON

Status
Rejected
Published
Sep 23, 2026, 7:19 PM
Modified
Oct 1, 2026, 10:17 AM

View source JSON

No data.

No data.