CVE-2026-82224

HighCVSS 7.1

Published: 31/08/2026(UTC)Updated: 02/09/2026(UTC)Translated: 01/09/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.15%

4th percentile - higher than 4% of all known CVEs

An unauthenticated Cross Site Scripting (XSS) vulnerability in SliceWP versions up to and including 1.2.10.

An attacker can inject malicious script into the page, potentially leading to data theft or session hijacking.

Update the SliceWP plugin to the latest version that includes a fix for this vulnerability.

Original NVD description (English source)

Unauthenticated Cross Site Scripting (XSS) in SliceWP <= 1.2.10 versions.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS