CVE Explorer

CVE-2026-9677

The Shariff for WordPress Shariff for WordPress plugin through 1.0.11 does not sanitize or escape the shariff_infourl setting before outputting it in the frontend HTML via the generateshariff() function, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup).

Lifecycle PUBLISHED1 preserved revisionFact urn:baitaphish:canonical-cve-fact-revision:v2:dd2abdd4867c5a29496453a3425811f72b336dce92d2b73bd5693a1d1b65ec2f

Known exploited

Not asserted

Disputed

Stale source

Conflicts

Affected products and versions

1 source assertion

{"defaultStatus":"unknown","product":"Shariff for WordPress","vendor":"Unknown","versions":[{"lessThanOrEqual":"1.0.11","status":"affected","version":"0","versionType":"semver"}]}

cve_program_cvelist_v5affected
urn:baitaphish:normalized-source-record:v2:af693e227ebe0c92a3821b3fdd90cfe19174ddb43b19828163a954f1f7875c8f · sha256:44a013f89626ebc8… · /containers/cna/affected/0

Provider-owned CVSS observations

1 source assertion

{"metric":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"NONE","baseScore":4.8,"baseSeverity":"MEDIUM","confidentialityImpact":"LOW","integrityImpact":"LOW","privilegesRequired":"HIGH","scope":"CHANGED","userInteraction":"REQUIRED","vectorString":"CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N","version":"3.1"},"metric_type":"cvssV3_1"}

cve_program_cvelist_v5cvss
urn:baitaphish:normalized-source-record:v2:af693e227ebe0c92a3821b3fdd90cfe19174ddb43b19828163a954f1f7875c8f · sha256:44a013f89626ebc8… · /containers/adp/0/metrics/0/cvssV3_1

CWE assertions

1 source assertion

{"description":"CWE-79 Cross-Site Scripting (XSS)","lang":"en","type":"CWE"}

cve_program_cvelist_v5cwe
urn:baitaphish:normalized-source-record:v2:af693e227ebe0c92a3821b3fdd90cfe19174ddb43b19828163a954f1f7875c8f · sha256:44a013f89626ebc8… · /containers/cna/problemTypes/0/descriptions/0

Source references

1 source assertion

{"tags":["exploit","vdb-entry","technical-description"],"url":"https://wpscan.com/vulnerability/c40298d0-42c2-406c-817a-9bbf246bbeea/"}

cve_program_cvelist_v5reference
urn:baitaphish:normalized-source-record:v2:af693e227ebe0c92a3821b3fdd90cfe19174ddb43b19828163a954f1f7875c8f · sha256:44a013f89626ebc8… · /containers/cna/references/0

Attribution and limitations

CVE Program CVEList V5: Reproduce the MITRE copyright designation and CVE license in copies. Source →

Provider severity values are preserved separately. Baitaphish does not convert them into a risk rating, infer affected products, or treat EPSS as observed exploitation.

← Back to CVE Explorer