CVE-2026-82883

HighCVSS 7.1

Published: 02/09/2026(UTC)Updated: 03/09/2026(UTC)Translated: 02/09/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.15%

4th percentile - higher than 4% of all known CVEs

Summary

The Marcus Login With Ajax plugin up to version 4.5.1 contains a Reflected Cross-Site Scripting vulnerability due to improper neutralization of input during web page generation.

Risk Assessment

The risk is the execution of malicious scripts in the victim's browser, which could lead to session or data theft.

Recommendation

Update the plugin to the latest patched version. Also avoid clicking on suspicious links.

Other vulnerabilities in Login With Ajax

CVE-2026-66640Medium
Cross Site Scripting (XSS) vulnerability in Login With Ajax in versions up to 4.5.1. A user with Contributor role can inject malicious script.

Original NVD description (English source)

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Marcus Login With Ajax allows Reflected XSS. This issue affects Login With Ajax: from n/a through 4.5.1.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS