What is GHSA-2g6g-5w2g-6pf8?

GHSA-2g6g-5w2g-6pf8 is a security advisory published by GitHub Security Advisories with High severity. The WP-Lister Lite for eBay plugin for WordPress is vulnerable to Stored Cross-Site Scripting via...

Which CVE IDs does GHSA-2g6g-5w2g-6pf8 cover?

GHSA-2g6g-5w2g-6pf8 covers the following CVE IDs: CVE-2026-18595. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-2g6g-5w2g-6pf8?

GHSA-2g6g-5w2g-6pf8 has a CVSS v3 base score of 7.2, published by GitHub Security Advisories.

GHSA-2g6g-5w2g-6pf8HighCVSS 7.2

The WP-Lister Lite for eBay plugin for WordPress is vulnerable to Stored Cross-Site Scripting via...

Vendor

GitHub Security Advisories

Published

September 16, 2026

Last Modified

September 16, 2026

🔗 CVE IDs covered (1)

CVE-2026-18595 →

📋 Description

The WP-Lister Lite for eBay plugin for WordPress is vulnerable to Stored Cross-Site Scripting via AJAX Cron Handler Request Parameter in all versions up to, and including, 3.8.9 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.

🔗 References (4)

https://nvd.nist.gov/vuln/detail/CVE-2026-18595
https://plugins.trac.wordpress.org/changeset/3638342/wp-lister-for-ebay
https://www.wordfence.com/threat-intel/vulnerabilities/id/fe3302c0-4817-459e-a6f6-d5ead9c29fed?source=cve
https://github.com/advisories/GHSA-2g6g-5w2g-6pf8