CVE-2026-62095: WordPress Biolife theme <= 3.2.3 - Reflected Cross Site Scripting (XSS) vulnerability

Q: Who can exploit this issue?

No authentication is required. An attacker would need to convince a user to interact with a crafted request, as indicated by the required user interaction in the CVSS vector.

Q: What impact could successful exploitation have?

Successful exploitation may affect confidentiality, integrity, and availability, each with low impact according to the CVSS vector. Because the scope is changed, the effects may extend beyond the vulnerable theme's security authority.

Q: Which theme versions are affected?

Biolife theme versions 3.2.3 and earlier are identified as affected.

Published Oct 10, 2026

Updated

Unauthenticated Cross Site Scripting (XSS) in Biolife <= 3.2.3 versions.

Affected Software

1 affected component

WordPress Biolife theme<=3.2.3

Event History

Oct 10, 2026

CVE Published

via MITRE·07:35 PM

Data Sourced

via MITRE·07:35 PM

DescriptionSeverityWeakness

Data Sourced

via NVD·08:16 PM

DescriptionSeverityWeakness

Frequently Asked Questions

Who can exploit this issue?

No authentication is required. An attacker would need to convince a user to interact with a crafted request, as indicated by the required user interaction in the CVSS vector.

What impact could successful exploitation have?

Successful exploitation may affect confidentiality, integrity, and availability, each with low impact according to the CVSS vector. Because the scope is changed, the effects may extend beyond the vulnerable theme's security authority.

Which theme versions are affected?

Biolife theme versions 3.2.3 and earlier are identified as affected.

CVE-2026-62095: WordPress Biolife theme <= 3.2.3 - Reflected Cross Site Scripting (XSS) vulnerability

Affected Software

Event History

Frequently Asked Questions

Who can exploit this issue?

What impact could successful exploitation have?

Which theme versions are affected?

Company

Resources

Contact

Frequently Asked Questions

Who can exploit this issue?

What impact could successful exploitation have?

Which theme versions are affected?