CVE-2026-115612: WordPress SliceWP plugin <= 1.2.13 - Cross Site Scripting (XSS) vulnerability

Q: Which SliceWP versions are affected?

The issue affects SliceWP versions through 1.2.13. The available data does not identify the first affected version.

Q: Does exploiting this issue require authentication or special privileges?

No privileges are required according to the CVSS vector. Exploitation does require user interaction.

Q: What impact can successful exploitation have?

This is a stored XSS issue with low confidentiality, integrity, and availability impacts in the supplied CVSS data. Its scope is changed, meaning the impact may extend beyond the vulnerable component.

Published Oct 28, 2026

Updated

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in iova.mihai SliceWP slicewp allows Stored XSS.This issue affects SliceWP: from n/a through 1.2.13.

Affected Software

1 affected component

SliceWP SliceWP<=1.2.13

Remediation

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade WordPress SliceWP plugin to a version that resolves this vulnerability.
Fixed in 1.2.14

Event History

Oct 28, 2026

CVE Published

via MITRE·01:00 PM

Data Sourced

via MITRE·01:00 PM

RemedyDescriptionSeverityWeakness

Frequently Asked Questions

Which SliceWP versions are affected?

The issue affects SliceWP versions through 1.2.13. The available data does not identify the first affected version.

Does exploiting this issue require authentication or special privileges?

No privileges are required according to the CVSS vector. Exploitation does require user interaction.

What impact can successful exploitation have?

This is a stored XSS issue with low confidentiality, integrity, and availability impacts in the supplied CVSS data. Its scope is changed, meaning the impact may extend beyond the vulnerable component.

CVE-2026-115612: WordPress SliceWP plugin <= 1.2.13 - Cross Site Scripting (XSS) vulnerability

Affected Software

Remediation

Event History

Frequently Asked Questions

Which SliceWP versions are affected?

Does exploiting this issue require authentication or special privileges?

What impact can successful exploitation have?

Company

Resources

Contact

Frequently Asked Questions

Which SliceWP versions are affected?

Does exploiting this issue require authentication or special privileges?

What impact can successful exploitation have?