CVE-2026-92409

MediumCVSS 6.8

Published: 14/10/2026(UTC)Updated: 15/10/2026(UTC)Translated: 14/10/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.19%

8th percentile - higher than 8% of all known CVEs

Summary

The Donation Thermometer WordPress plugin before 2.3.0 does not escape a colour value taken from a shortcode attribute before using it in an attribute of the generated legend markup. This allows users with the Contributor role and above to inject arbitrary event handlers that execute when the page is viewed.

Risk Assessment

Malicious JavaScript can be injected and executed in visitors' browsers, potentially leading to session theft or other attacks.

Recommendation

Update the Donation Thermometer plugin to version 2.3.0 or later.

Other vulnerabilities in Donation Thermometer

CVE-2025-67550Medium
The Donation Thermometer plugin for WordPress (up to version 2.2.6) has a Stored XSS vulnerability due to improper input neutralization during page generation. An attacker can store a malicious script that executes on every user visit.

Original NVD description (English source)

The Donation Thermometer WordPress plugin before 2.3.0 does not escape a colour value taken from a shortcode attribute before using it in an attribute of the generated legend markup, allowing users with the Contributor role and above to inject arbitrary event handlers that execute when the page is viewed.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS