CVE-2026-111838: WordPress ThemeHunk Customizer plugin <= 2.8.7 - Cross Site Scripting (XSS) vulnerability

Q: Which installations are in scope?

ThemeHunk ThemeHunk Customizer installations running version 2.8.7 or earlier are affected.

Q: Does exploitation require authentication or user interaction?

The vector indicates network exploitation with low attack complexity and no privileges required. User interaction is required.

Q: What level of impact is indicated if exploitation succeeds?

The severity vector indicates low impacts to confidentiality, integrity, and availability, with scope changed.

Published Oct 21, 2026

Updated

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in ThemeHunk ThemeHunk Customizer themehunk-customizer allows Reflected XSS.This issue affects ThemeHunk Customizer: from n/a through 2.8.7.

Affected Software

1 affected component

ThemeHunk ThemeHunk Customizer<=2.8.7

Remediation

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade wordpress/themehunk-customizer to a version that resolves this vulnerability.
Fixed in 2.8.8

Event History

Oct 21, 2026

CVE Published

via MITRE·02:00 PM

Data Sourced

via MITRE·02:00 PM

RemedyDescriptionSeverityWeakness

Frequently Asked Questions

Which installations are in scope?

ThemeHunk ThemeHunk Customizer installations running version 2.8.7 or earlier are affected.

Does exploitation require authentication or user interaction?

The vector indicates network exploitation with low attack complexity and no privileges required. User interaction is required.

What level of impact is indicated if exploitation succeeds?

The severity vector indicates low impacts to confidentiality, integrity, and availability, with scope changed.

CVE-2026-111838: WordPress ThemeHunk Customizer plugin <= 2.8.7 - Cross Site Scripting (XSS) vulnerability

Affected Software

Remediation

Event History

Frequently Asked Questions

Which installations are in scope?

Does exploitation require authentication or user interaction?

What level of impact is indicated if exploitation succeeds?

Company

Resources

Contact

Frequently Asked Questions

Which installations are in scope?

Does exploitation require authentication or user interaction?

What level of impact is indicated if exploitation succeeds?