CVE-2026-119089 | ThirstyAffiliates Plugin up to 3.12.1 on WordPress Comment Content comment cross site scripting

October 31, 2026 Yanac

A vulnerability, which was classified as problematic, was found in ThirstyAffiliates Plugin up to 3.12.1 on WordPress. This affects an unknown part of the component Comment Content. Executing a manipulation of the argument Comment can lead to cross site scripting.

This vulnerability appears as CVE-2026-119089. The attack may be performed from remote. There is no available exploit.VulDB Recent EntriesRead More