CVE-2026-57350

HighCVSS 7.1

Published: 02/07/2026(UTC)Updated: 02/07/2026(UTC)Translated: 03/07/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.19%

9th percentile — higher than 9% of all known CVEs

Summary

The WP Debugging plugin version 2.12.2 and earlier contains an unauthenticated Cross Site Scripting (XSS) vulnerability. An attacker can inject malicious script without requiring authentication.

Risk Assessment

The risk involves potential execution of arbitrary JavaScript code in administrators' or users' browsers, which could lead to session theft, site defacement, or account takeover.

Recommendation

It is recommended to immediately update the WP Debugging plugin to the latest available version that fixes this vulnerability.

Original NVD description (English source)

Unauthenticated Cross Site Scripting (XSS) in WP Debugging <= 2.12.2 versions.