CVE-2026-94166: WordPress UpSolution Core plugin <= 8.44 - Cross Site Scripting (XSS) vulnerability

Q: Which installations are affected?

UpSolution Core versions through 8.44 are affected. The provided data does not identify a fixed version or indicate whether any specific WordPress configuration is exempt.

Q: What does exploitation require?

The vector is network-based, requires low attack complexity, and does not require attacker privileges. A user must interact with attacker-controlled content or a crafted request for exploitation to occur.

Q: What is the potential impact?

Successful exploitation can affect confidentiality, integrity, and availability at low impact levels, and the scope can extend beyond the vulnerable component.

Published Oct 9, 2026

Updated

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in UpSolution UpSolution Core us-core allows Reflected XSS.This issue affects UpSolution Core: from n/a through 8.44.

Affected Software

1 affected component

UpSolution UpSolution Core<=8.44

Event History

Oct 9, 2026

CVE Published

via MITRE·10:00 AM

Data Sourced

via MITRE·10:00 AM

DescriptionSeverityWeakness

Frequently Asked Questions

Which installations are affected?

UpSolution Core versions through 8.44 are affected. The provided data does not identify a fixed version or indicate whether any specific WordPress configuration is exempt.

What does exploitation require?

The vector is network-based, requires low attack complexity, and does not require attacker privileges. A user must interact with attacker-controlled content or a crafted request for exploitation to occur.

What is the potential impact?

Successful exploitation can affect confidentiality, integrity, and availability at low impact levels, and the scope can extend beyond the vulnerable component.

CVE-2026-94166: WordPress UpSolution Core plugin <= 8.44 - Cross Site Scripting (XSS) vulnerability

Affected Software

Event History

Frequently Asked Questions

Which installations are affected?

What does exploitation require?

What is the potential impact?

Company

Resources

Contact

Frequently Asked Questions

Which installations are affected?

What does exploitation require?

What is the potential impact?