CVE-2026-81771: WordPress TrustedSite plugin <= 1.2.5 - Cross Site Scripting (XSS) vulnerability
Published Sep 2, 2026
·Updated
Unauthenticated Cross Site Scripting (XSS) in TrustedSite <= 1.2.5 versions.
Affected Software
1 affected component
WordPress TrustedSite<=1.2.5
Event History
Sep 2, 2026
CVE Published
via MITRE·11:37 AM
Data Sourced
via MITRE·11:37 AM
DescriptionSeverityWeakness
Frequently Asked Questions
1
Who can exploit this issue?
The vulnerability is unauthenticated, so an attacker does not need a WordPress account or prior privileges. Exploitation requires user interaction.
2
Which installations are affected?
WordPress sites using the TrustedSite plugin version 1.2.5 or earlier are affected, based on the available information.