Dartiss Draft List vulnerabilities

• dartiss draft list WordPress Draft List plugin <= 2.6.4 - Cross Site Scripting (XSS) vulnerability CVE-2026-66603 6.5 MediumAugust 18, 2026
• dartiss draft list Draft List <= 2.6.3 - Authenticated (Author+) Stored Cross-Site Scripting via Draft Post Title CVE-2026-9104 6.4 MediumMay 22, 2026
• dartiss draft list Draft List <= 2.6.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'display_name' Parameter CVE-2026-4006 6.4 MediumMarch 19, 2026
• dartiss draft list Draft List <= 2.6.1 - Authenticated (Contributor+) Stored Cross-Site Scripting CVE-2025-11197 6.4 MediumOctober 11, 2025
• dartiss draft list Draft List <= 2.6 - Authenticated (Contributor+) Stored Cross-Site Scripting CVE-2025-10181 6.4 MediumSeptember 20, 2025