CVE-2026-61988: WordPress Auction Nudge – Your eBay on Your Site plugin <= 8.4.0 - Cross Site Scripting (XSS) vulnerability

Q: Who can exploit this issue?

The vulnerability is unauthenticated, so an attacker does not need a WordPress account or other prior access. Exploitation still requires user interaction, as indicated by the UI:R vector.

Q: What versions are affected?

Auction Nudge – Your eBay on Your Site versions 8.4.0 and earlier are affected. The provided data does not identify a fixed version.

Q: What is the potential impact of successful exploitation?

Successful XSS can affect confidentiality, integrity, and availability, each with low impact according to the supplied CVSS vector. The scope is changed, meaning the impact can extend beyond the vulnerable component's security authority.

Published Oct 29, 2026

Updated

Unauthenticated Cross Site Scripting (XSS) in Auction Nudge – Your eBay on Your Site <= 8.4.0 versions.

Event History

Oct 29, 2026

CVE Published

via MITRE·03:24 PM

Data Sourced

via MITRE·03:24 PM

DescriptionSeverityWeakness

Data Sourced

via NVD·04:18 PM

DescriptionSeverityWeakness

Frequently Asked Questions

Who can exploit this issue?

The vulnerability is unauthenticated, so an attacker does not need a WordPress account or other prior access. Exploitation still requires user interaction, as indicated by the UI:R vector.

What versions are affected?

Auction Nudge – Your eBay on Your Site versions 8.4.0 and earlier are affected. The provided data does not identify a fixed version.

What is the potential impact of successful exploitation?

Successful XSS can affect confidentiality, integrity, and availability, each with low impact according to the supplied CVSS vector. The scope is changed, meaning the impact can extend beyond the vulnerable component's security authority.

CVE-2026-61988: WordPress Auction Nudge – Your eBay on Your Site plugin <= 8.4.0 - Cross Site Scripting (XSS) vulnerability

Event History

Frequently Asked Questions

Who can exploit this issue?

What versions are affected?

What is the potential impact of successful exploitation?

Company

Resources

Contact

Frequently Asked Questions

Who can exploit this issue?

What versions are affected?

What is the potential impact of successful exploitation?