Is CVE-2026-83547 being exploited?

No public exploit is currently tracked.

How severe is CVE-2026-83547?

CVE-2026-83547 has a CVSS v3 severity of MEDIUM (6.8).

Back

CVE-2026-83547

Description

The Xpro Addons WordPress plugin before 1.7.4 does not properly escape some of its widgets' settings before outputting them within HTML attributes, which could allow users with the Contributor role and above to perform Stored Cross-Site Scripting attacks.