Skip to content
Every CVE
Browse
Docs
Sources
Guide
Search
/
Get
API key
Every CVE
Vendors
John-dagelmore
Wpspeed – Wordpress Speed, Cache & Performance Optimization (core Web Vitals, Pagespeed 100)
John-dagelmore Wpspeed – Wordpress Speed, Cache & Performance Optimization (core Web Vitals, Pagespeed 100) vulnerabilities
Any severity
Critical
High or worse
Medium or worse
Low or worse
Any EPSS
EPSS 10% or more
EPSS 50% or more
EPSS 90% or more
Known exploited
In KEV
Public exploit
Fix available
Apply
john-dagelmore
wpspeed – wordpress speed, cache & performance optimization (core web vitals, pagespeed 100)
WPSpeed <= 2.6.10 - Authenticated (Subscriber+) Stored Cross-Site Scripting via User Nickname/Display Name
CVE-2026-118784
6.4
Medium
November 7, 2026
esc
Pages
All vulnerabilities
Browse
Docs
Sources
Guide
Get API key
Move
Enter
Open