Skip to content
Threat Feed
Subscribe

Vendor

WP Meteor

1 brief RSS
high advisory

Stored Cross-Site Scripting in WP Meteor Website Speed Optimization Addon

The WP Meteor Website Speed Optimization Addon for WordPress versions 3.4.18 and earlier contains a Stored XSS vulnerability allowing unauthenticated attackers to inject malicious scripts via the comment author name field.

WP Meteor Website Speed Optimization Addon xss web-vulnerability wordpress cve-2026-96572
1t 1c