CVE-2026-42634: WordPress Video Background Block – Use video as background in the section. plugin <= 2.0.3 - Cross Site Scripting (XSS) vulnerability

Q: What does an attacker need to exploit this issue?

The vulnerability is unauthenticated, so no account or prior privileges are required. Exploitation does require user interaction, as indicated by the UI:R vector.

Q: Which installations are affected?

WordPress sites using the Video Background Block – Use video as background in the section plugin are affected if the plugin version is 2.0.3 or earlier.

Q: What is the potential impact?

The supplied severity vector indicates low impact to confidentiality, integrity, and availability, with scope changed. Successful exploitation is classified as high severity with a 7.1 score.

Published Oct 6, 2026

Updated

Unauthenticated Cross Site Scripting (XSS) in Video Background Block – Use video as background in the section. <= 2.0.3 versions.

Affected Software

1 affected component

WordPress Video Background Block – Use video as background in the section<=2.0.3

Event History

Oct 6, 2026

CVE Published

via MITRE·08:34 AM

Data Sourced

via MITRE·08:34 AM

DescriptionSeverityWeakness

Data Sourced

via NVD·09:17 AM

DescriptionSeverityWeakness

Frequently Asked Questions

What does an attacker need to exploit this issue?

The vulnerability is unauthenticated, so no account or prior privileges are required. Exploitation does require user interaction, as indicated by the UI:R vector.

Which installations are affected?

WordPress sites using the Video Background Block – Use video as background in the section plugin are affected if the plugin version is 2.0.3 or earlier.

What is the potential impact?

The supplied severity vector indicates low impact to confidentiality, integrity, and availability, with scope changed. Successful exploitation is classified as high severity with a 7.1 score.

CVE-2026-42634: WordPress Video Background Block – Use video as background in the section. plugin <= 2.0.3 - Cross Site Scripting (XSS) vulnerability

Affected Software

Event History

Frequently Asked Questions

What does an attacker need to exploit this issue?

Which installations are affected?

What is the potential impact?

Company

Resources

Contact

Frequently Asked Questions

What does an attacker need to exploit this issue?

Which installations are affected?

What is the potential impact?