CVE-2026-61982: WordPress SiteGuard WP Plugin plugin <= 1.8.6 - Cross Site Scripting (XSS) vulnerability

Published Aug 6, 2026

Updated

Unauthenticated Cross Site Scripting (XSS) in SiteGuard WP Plugin <= 1.8.6 versions.

Affected Software

1 affected component

SiteGuard WP Plugin<=1.8.6

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade WordPress SiteGuard WP Plugin to a version that resolves this vulnerability.
Fixed in 1.8.7

Aug 6, 2026

CVE Published

via MITRE·02:27 PM

Data Sourced

via MITRE·02:27 PM

RemedyDescriptionSeverityWeakness

CVE-2026-61982 has a severity rating of high, specifically 7.1.

CVE-2026-61982 is an unauthenticated Cross Site Scripting (XSS) vulnerability.

To fix CVE-2026-61982, update the SiteGuard WP Plugin to the latest version beyond 1.8.6.

CVE-2026-61982 affects all versions of SiteGuard WP Plugin up to and including 1.8.6.

CVE-2026-61982 can allow attackers to execute arbitrary JavaScript in the context of a user's session, compromising user data and site integrity.