EIP-2026-113594
PRE-CVEWordPress Plugin Better WP Security 3.4.8/3.4.9/3.4.10/3.5.2/3.5.3 - Persistent Cross-Site Scripting
Title source: legacyExploitation Summary
EIP tracks 1 public exploit for EIP-2026-113594. PoCs published by Richard Warren.
AI-analyzed exploit summary The writeup details an unauthenticated stored XSS vulnerability in the Bit51 Better WP Security Plugin, where malicious payloads can be injected via 404 error logs and executed when viewed by an admin. The technical analysis includes a proof-of-concept request demonstrating the exploit.
Description
WordPress Plugin Better WP Security 3.4.8/3.4.9/3.4.10/3.5.2/3.5.3 - Persistent Cross-Site Scripting
Exploits (1)
The writeup details an unauthenticated stored XSS vulnerability in the Bit51 Better WP Security Plugin, where malicious payloads can be injected via 404 error logs and executed when viewed by an admin. The technical analysis includes a proof-of-concept request demonstrating the exploit.