What is GHSA-7rxv-rgcp-8v64?

GHSA-7rxv-rgcp-8v64 is a security advisory published by GitHub Security Advisories with Medium severity. The Xpro Addons WordPress plugin before 1.7.4 does not properly escape some of its widgets'...

Which CVE IDs does GHSA-7rxv-rgcp-8v64 cover?

GHSA-7rxv-rgcp-8v64 covers the following CVE IDs: CVE-2026-83547. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-7rxv-rgcp-8v64?

GHSA-7rxv-rgcp-8v64 has a CVSS v3 base score of 6.8, published by GitHub Security Advisories.

GHSA-7rxv-rgcp-8v64MediumCVSS 6.8

The Xpro Addons WordPress plugin before 1.7.4 does not properly escape some of its widgets'...

Vendor

GitHub Security Advisories

Published

September 2, 2026

Last Modified

September 2, 2026

🔗 CVE IDs covered (1)

CVE-2026-83547 →

📋 Description

The Xpro Addons WordPress plugin before 1.7.4 does not properly escape some of its widgets' settings before outputting them within HTML attributes, which could allow users with the Contributor role and above to perform Stored Cross-Site Scripting attacks.

🔗 References (3)

https://nvd.nist.gov/vuln/detail/CVE-2026-83547
https://wpscan.com/vulnerability/a8298cc0-9e5b-41e2-ba44-b6f1bad30a67
https://github.com/advisories/GHSA-7rxv-rgcp-8v64