CVE-2026-86797

CVE-2026-86797CVE-2026-86797

Description

The Pricing Table WordPress plugin before 2.1.5 does not validate the scheme of a user-supplied link value in one of its blocks before rendering it, allowing users with contributor-level access and above to store malicious scripts that execute when another user views and interacts with the affected content.

Scoring

CVSS 6.8 ()
VectorCVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:H
Last modified2026-10-14
Sourced from NVD. Curated for EU compliance use cases by Adam Lundqvist, Founder at SQUR.