CVE-2026-115966: WordPress Typing Text – Give your texts many typing effects plugin <= 2.2.0 - Cross Site Scripting (XSS) vulnerability

Q: What level of access does an attacker need to exploit this issue?

The attacker needs low-level privileges and must persuade a user to interact with the crafted content. The attack can be performed remotely over the network.

Q: What could exploitation allow?

Successful exploitation can result in stored cross-site scripting and has low impact on confidentiality, integrity, and availability. The scope is changed, meaning the vulnerable component may affect resources beyond its own security authority.

Q: Which versions are affected?

The affected range is stated as versions through 2.2.0. No fixed version is provided in the available data.

Published Oct 26, 2026

Updated

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in bPlugins Typing Text – Give your texts many typing effects text-typing allows Stored XSS.This issue affects Typing Text – Give your texts many typing effects: from n/a through 2.2.0.

Affected Software

1 affected component

bPlugins Typing Text – Give your texts many typing effects<=2.2.0

Remediation

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade WordPress Typing Text – Give your texts many typing effects to a version that resolves this vulnerability.
Fixed in 2.2.1

Event History

Oct 26, 2026

CVE Published

via MITRE·05:27 PM

Data Sourced

via MITRE·05:27 PM

RemedyDescriptionSeverityWeakness

Frequently Asked Questions

What level of access does an attacker need to exploit this issue?

The attacker needs low-level privileges and must persuade a user to interact with the crafted content. The attack can be performed remotely over the network.

What could exploitation allow?