What is GHSA-mwqj-x4rq-9232?

GHSA-mwqj-x4rq-9232 is a security advisory published by GitHub Security Advisories with High severity. The Optimole WordPress plugin before 4.2.12 does not properly escape a user supplied value...

Which CVE IDs does GHSA-mwqj-x4rq-9232 cover?

GHSA-mwqj-x4rq-9232 covers the following CVE IDs: CVE-2026-84829. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-mwqj-x4rq-9232?

GHSA-mwqj-x4rq-9232 has a CVSS v3 base score of 8.8, published by GitHub Security Advisories.

GHSA-mwqj-x4rq-9232HighCVSS 8.8

The Optimole WordPress plugin before 4.2.12 does not properly escape a user supplied value...

Vendor

GitHub Security Advisories

Published

September 16, 2026

Last Modified

September 17, 2026

🔗 CVE IDs covered (1)

CVE-2026-84829 →

📋 Description

The Optimole WordPress plugin before 4.2.12 does not properly escape a user supplied value before using it to build an image tag attribute, allowing unauthenticated users to inject arbitrary attributes into pages served to every visitor, which leads to Stored Cross-Site Scripting.

🔗 References (3)

https://nvd.nist.gov/vuln/detail/CVE-2026-84829
https://wpscan.com/vulnerability/c8489eb1-e767-4b19-a7c0-124eab843d9e
https://github.com/advisories/GHSA-mwqj-x4rq-9232