CVE WATCH / VULNERABILITY DETAIL
CVE-2026-10511
MEDIUMCVSS 6.4NVD feed
Published 27 October 2026 · tracked since 28 October 2026
Description
The Jupiter X Core plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'forget_password_link' parameter in all versions up to, and including, 4.61.0 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with contributor-
References
- NVD — National Vulnerability Database
- CVE.org record (MITRE)
- CISA Known Exploited Vulnerabilities catalog
Latest tracked vulnerabilities
- CVE-2026-117602 HIGH 8.4
- CVE-2026-117603 MEDIUM 4.3
- CVE-2026-117566 MEDIUM 5.3
- CVE-2026-117564 CRITICAL 9.8
- CVE-2026-117558 HIGH 7.8
- CVE-2026-117559 HIGH 7.8
- CVE-2026-117554 MEDIUM 4.3
- CVE-2026-65119 HIGH 8.4
- CVE-2026-117499 LOW 3.7
- CVE-2026-10752 MEDIUM 4.8