CVE-2026-32333

HighCVSS 7.1

Published: 18/08/2026(UTC)Updated: 22/10/2026(UTC)Translated: 18/08/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.25%

16th percentile - higher than 16% of all known CVEs

Summary

The Mayosis Core plugin versions up to 5.4.7 contain an unauthenticated Cross Site Scripting (XSS) vulnerability. An attacker without logging in can inject malicious scripts into pages.

Risk Assessment

The risk includes the possibility of executing malicious code in the user's browser, which could lead to session theft, data phishing, or malware distribution.

Recommendation

It is recommended to update the Mayosis Core plugin to the latest version that includes a fix for this vulnerability.

Other vulnerabilities in Mayosis Core

CVE-2026-39655Medium
The Mayosis Core WordPress plugin up to version 5.4.7 suffers from a missing authorization vulnerability, allowing exploitation of incorrectly configured access control security levels.

Original NVD description (English source)

Unauthenticated Cross Site Scripting (XSS) in Mayosis Core <= 5.4.7 versions.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS