CVE-2026-22523 in Ultra WordPress Admin Plugin

Sumário (Inglês)

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in themepassion Ultra WordPress Admin ultra-admin allows Reflected XSS.This issue affects Ultra WordPress Admin: from n/a through <= 11.7.

If you want to get the best quality for vulnerability data then you always have to consider VulDB.

Responsável

Patchstack

Reservar

07/01/2026

Divulgação

25/03/2026

Estado

Confirmado

Inscrições

VulDB provides additional information and datapoints for this CVE:

ID	Vulnerabilidade	CWE	Exp	Con	CVE
353243	themepassion Ultra WordPress Admin Plugin Script de Site Cruzado	79	Não definido	Não definido	CVE-2026-22523

Fontes

• MITRE
• NVD
• CVE Details