Skip to content
Vulnerability intelligence

CVE-2026-75962: Post SMTP for WordPress stored cross-site scripting flaw

CVE-2026-75962 shows how a failed email send can save hostile input in a log that later gets displayed

WordPress 2026
What WebPulse reported · 1 analysis
Post SMTP error log could store attacker scripts on open WordPress Multisite

CVE-2026-75962 shows how a failed email send can save hostile input in a log that later gets displayed

October 8, 2026
View CVE-2026-75962 on the NIST National Vulnerability Database →
Related vulnerabilities
CVE-2026-60137 CVE-2026-8206 CVE-2026-8181 CVE-2026-63030 CVE-2026-10795 CVE-2026-3844 CVE-2026-1293 CVE-2026-87902