CVE-2026-115957: WordPress WP Discussion Board plugin <= 2.6.0 - Cross Site Scripting (XSS) vulnerability

Q: What does an attacker need to exploit this issue?

The attack is network-reachable and has low complexity, but the attacker needs low-level privileges and user interaction is required.

Q: What is the expected security impact?

The vulnerability has a medium severity score of 6.5. It can result in low impact to confidentiality, integrity, and availability, and its scope is changed.

Q: How far back does the affected version range extend?

The affected range is stated as versions through 2.6.0, with no known lower-bound version provided.

Published Oct 28, 2026

Updated

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WP Discussion Board WP Discussion Board wp-discussion-board allows Stored XSS.This issue affects WP Discussion Board: from n/a through 2.6.0.

Affected Software

1 affected component

WP Discussion Board WP Discussion Board<=2.6.0

Remediation

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade wordpress/wp-discussion-board to a version that resolves this vulnerability.
Fixed in 2.6.1

Event History

Oct 28, 2026

CVE Published

via MITRE·01:00 PM

Data Sourced

via MITRE·01:00 PM

RemedyDescriptionSeverityWeakness

Frequently Asked Questions

What does an attacker need to exploit this issue?

The attack is network-reachable and has low complexity, but the attacker needs low-level privileges and user interaction is required.

What is the expected security impact?

The vulnerability has a medium severity score of 6.5. It can result in low impact to confidentiality, integrity, and availability, and its scope is changed.

How far back does the affected version range extend?

The affected range is stated as versions through 2.6.0, with no known lower-bound version provided.

CVE-2026-115957: WordPress WP Discussion Board plugin <= 2.6.0 - Cross Site Scripting (XSS) vulnerability

Affected Software

Remediation

Event History

Frequently Asked Questions

What does an attacker need to exploit this issue?

What is the expected security impact?

How far back does the affected version range extend?

Company

Resources

Contact

Frequently Asked Questions

What does an attacker need to exploit this issue?

What is the expected security impact?

How far back does the affected version range extend?