CVE-2021-39201

score

<0.1

cvss

7.6

epss

1.5%

published

2021-09-09

kev added

—

first seen

2026-10-21

WordPress contains a cross-site scripting (XSS) caused by insufficient input sanitization in the editor, letting authenticated low-privileged users execute malicious scripts, exploit requires user to be logged in with contributor or author role.