CVE-2026-115957

MediumCVSS 6.5

Published: 28/10/2026(UTC)Updated: 29/10/2026(UTC)Translated: 28/10/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.17%

6th percentile - higher than 6% of all known CVEs

Summary

The WP Discussion Board plugin has a stored Cross-site Scripting (XSS) vulnerability due to improper neutralization of input during web page generation. The issue affects versions up to and including 2.6.0.

Risk Assessment

An attacker can store a malicious script that executes in other users' browsers, potentially leading to session theft or actions performed on behalf of the victim.

Recommendation

Update the WP Discussion Board plugin to a version later than 2.6.0 and deploy a Content-Security-Policy.

Other vulnerabilities in WP Discussion Board

CVE-2026-115958Medium
The WP Discussion Board WordPress plugin contains a missing authorization vulnerability allowing exploitation of incorrectly configured access control levels. The issue affects versions up to and including 2.6.0.

Original NVD description (English source)

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WP Discussion Board WP Discussion Board wp-discussion-board allows Stored XSS.This issue affects WP Discussion Board: from n/a through 2.6.0.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS