CVE-2026-81765: WordPress Tailored Tools plugin <= 3.0.2 - Cross Site Scripting (XSS) vulnerability
Published Aug 31, 2026
·Updated
Unauthenticated Cross Site Scripting (XSS) in Tailored Tools <= 3.0.2 versions.
Affected Software
1 affected component
WordPress Tailored Tools<=3.0.2
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
wordpress/tailored-toolsto a version that resolves this vulnerability.Fixed in 3.0.3
Event History
Aug 31, 2026
CVE Published
via MITRE·08:30 PM
Data Sourced
via MITRE·08:30 PM
RemedyDescriptionSeverityWeakness
Data Sourced
via NVD·09:17 PM
DescriptionSeverityWeakness
Frequently Asked Questions
1
Who can exploit this issue?
The vulnerability is unauthenticated, so an attacker does not need a WordPress account or other prior access to the affected site. Exploitation requires user interaction.
2
Which installations are affected?
WordPress sites using the Tailored Tools plugin version 3.0.2 or earlier are affected according to the available information.
3
What is the potential impact?
Successful exploitation can result in cross-site scripting, with low-impact effects on confidentiality, integrity, and availability. The vulnerability is rated high with a CVSS score of 7.1.