CVE-2026-86797: Pricing Table Block 1.0.7 - 2.1.4 - Contributor+ Stored XSS via Pricing Link

Q: Who can exploit this issue?

A user with contributor-level access or higher can supply a malicious link value in an affected Pricing Table block. Exploitation requires the attacker to be able to create or edit content using that block.

Q: When does the stored script execute?

The malicious script can execute when another user views and interacts with the affected content. This makes users who access published or otherwise viewable pages containing attacker-controlled Pricing Table blocks the potential targets.

Q: Which plugin versions are affected?

Pricing Table versions from 1.0.7 through 2.1.4 are affected. Version 2.1.5 is not described as affected.

Published Oct 14, 2026

Updated

The Pricing Table WordPress plugin before 2.1.5 does not validate the scheme of a user-supplied link value in one of its blocks before rendering it, allowing users with contributor-level access and above to store malicious scripts that execute when another user views and interacts with the affected content.

Affected Software

1 affected component

WordPress Pricing Table Block>=1.0.7<=2.1.4

Event History

Oct 14, 2026

CVE Published

via MITRE·06:00 AM

Data Sourced

via MITRE·06:00 AM

DescriptionWeakness

Frequently Asked Questions

Who can exploit this issue?

A user with contributor-level access or higher can supply a malicious link value in an affected Pricing Table block. Exploitation requires the attacker to be able to create or edit content using that block.

When does the stored script execute?

The malicious script can execute when another user views and interacts with the affected content. This makes users who access published or otherwise viewable pages containing attacker-controlled Pricing Table blocks the potential targets.

Which plugin versions are affected?

Pricing Table versions from 1.0.7 through 2.1.4 are affected. Version 2.1.5 is not described as affected.