medium6.8
CVE-2026-86797
The Pricing Table WordPress plugin before 2.1.5 does not validate the scheme of a user-supplied link value in one of its blocks before rendering it, allowing u…
Impact
The Pricing Table WordPress plugin before 2.1.5 does not validate the scheme of a user-supplied link value in one of its blocks before rendering it, allowing users with contributor-level access and above to store malicious scripts that execute when another user views and interacts with the affected content.
Affected products
| Product | Affected versions |
|---|---|
| Pricing Table WordPress Plugin | before 2.1.5 |
Versions were read from the advisory text. No structured product data has been published for this record yet.