CVE-2026-57742: WordPress Kids Planet theme <= 2.2.14.2 - Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in ThemeREX Group Kids Planet allows Reflected XSS.
This issue affects Kids Planet: from n/a through 2.2.14.2.
Affected Software
Event History
Frequently Asked Questions
Who can exploit this issue?
The CVSS vector indicates that exploitation can be performed over the network without authentication, but it requires user interaction. An attacker would need to induce a user to visit or interact with a crafted request.
Which installations are affected?
Kids Planet versions through 2.2.14.2 are affected. The provided data does not identify a configuration-dependent condition or an unaffected fixed version.
What is the potential impact?
Successful exploitation may affect confidentiality, integrity, and availability at low impact levels. Because the scope is changed, the impact can extend beyond the vulnerable theme's security authority.