CVE-2026-39517: WordPress Blog Filter plugin <= 1.7.6 - Cross Site Scripting (XSS) vulnerability
Published Apr 8, 2026
·Updated
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in A WP Life Blog Filter blog-filter allows DOM-Based XSS.This issue affects Blog Filter: from n/a through <= 1.7.6.
Affected Software
1 affected component
A WP Life Blog Filter<=1.7.6
Event History
Apr 8, 2026
CVE Published
via MITRE·08:30 AM
Data Sourced
via MITRE·08:30 AM
DescriptionSeverityWeakness
Data Sourced
via NVD·09:16 AM
DescriptionSeverityWeakness
Frequently Asked Questions
1
Who can exploit this issue?
An attacker must have low-privileged access and must be able to induce a user to interact with malicious content. The CVSS vector indicates the attack is network-accessible, has low complexity, and requires user interaction.
2
What impact could successful exploitation have?
The vulnerability can allow DOM-based cross-site scripting in the context of the affected site. The reported impact includes low confidentiality, integrity, and availability effects, with scope changed.
3
Which versions are affected?
Blog Filter versions through 1.7.6 are affected. The available data does not identify a fixed version.