Vulnerabilities and security researches foripgp-visitors-origin ipgp-visitors-origin

Sep 08, 2026

CVE, Research URL: CVE-2026-81404
Home page URL: Security reports for IPGP Visitors Origin
Application: IPGP Visitors Origin
Date: Sep 05, 2026
Research Description: The IPGP Visitors Origin WordPress plugin before 1.6 does not sanitise or escape user input before reflecting it back in the HTTP response, allowing unauthenticated attackers to perform Reflected Cross-Site Scripting attacks against users who are tricked into submitting a crafted request.
Affected versions: max 1.6.
Status: vulnerable