CVE-2026-27402

HighCVSS 7.1

Published: 02/07/2026(UTC)Updated: 02/07/2026(UTC)Translated: 03/07/2026(UTC)NVD NIST

Summary

The Kids Life | Children School WordPress plugin version 5.2 and earlier contains an unauthenticated Cross Site Scripting (XSS) vulnerability. An attacker can inject malicious script without requiring authentication.

Risk Assessment

The risk includes user session theft, redirects to malicious sites, and website defacement, potentially leading to loss of trust and reputational damage for the organization.

Recommendation

It is recommended to immediately update the Kids Life | Children School plugin to the latest available version and deploy a Web Application Firewall (WAF) to block XSS attacks.

Original NVD description (English source)

Unauthenticated Cross Site Scripting (XSS) in Kids Life | Children School WordPress <= 5.2 versions.