CVE-2026-54868

MediumCVSS 6.5

Published: 13/10/2026(UTC)Updated: 13/10/2026(UTC)Translated: 13/10/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.13%

2th percentile - higher than 2% of all known CVEs

Summary

The FV Simpler SEO plugin for WordPress has a Stored XSS vulnerability. This affects all versions from n/a through 1.9.7.

Risk Assessment

Stored XSS may allow an attacker to execute malicious scripts in users' browsers, potentially leading to data theft or session hijacking.

Recommendation

Update the plugin to the latest patched version and scan the site for malicious code.

Other vulnerabilities in FV Simpler SEO

CVE-2025-68579Medium
The FV Simpler SEO plugin (up to version 1.9.6) has a missing authorization vulnerability, allowing exploitation of incorrectly configured access control security levels. An attacker can leverage this to perform unauthorized actions.

Original NVD description (English source)

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in FolioVision FV Simpler SEO fv-all-in-one-seo-pack allows Stored XSS.This issue affects FV Simpler SEO: from n/a through 1.9.7.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS