CVE-2026-84151
3.5 LOWPublished 2026-09-24 · Updated 2026-09-24
AI analysis for this CVE has not been generated yet. Raw NVD data is shown below.
NVD description
The Post Grid WordPress plugin before 7.9.5 does not limit an expansion of the WordPress allowed-HTML list to its own markup and applies it site-wide, allowing users with the Contributor role and above to store iframe, style and input elements that are normally stripped from their content, leading to HTML injection (phishing frames, CSS defacement and spoofed input forms) that renders to any visitor and to administrators reviewing the content.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:L/I:L/A:N
Weaknesses
CWE-79
All references
Source data: NVD (nvd.nist.gov), public domain. Exploit-DB.ai adds local AI analysis for defensive use only.
Related CVEs
- MEDIUMCVE-2025-13533PoC
- MEDIUMCVE-2025-14814
- LOWCVE-2025-15677
- MEDIUMCVE-2025-15696
- LOWCVE-2025-15698
- MEDIUMCVE-2025-36147
- HIGHCVE-2025-61682PoC
- MEDIUMCVE-2025-71419PoC
Related by shared AI tags and CWE weakness class. Browse the full archive.