CVE-2026-121782highCWE-79

CVE-2026-121782: high-severity vulnerability in If-So Dynamic Content Personalization

WordPress If-So Dynamic Content Personalization plugin <= 1.10.3 - Cross Site Scripting (XSS) vulnerability

Published

Follow this CVE+ Monitor If-So Dynamic Content Personalization

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

18Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 7.1
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in If-So Dynamic Content If-So Dynamic Content Personalization if-so allows Reflected XSS.This issue affects If-So Dynamic Content Personalization: from n/a through 1.10.3.
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L
Affected products
If-So Dynamic Content · If-So Dynamic Content Personalization
Related CVEs — If-So Dynamic Content Personalization

In the same product, most dangerous first.

CVE-2026-66446CRITICALWordPress If-So Dynamic Content Personalization plugin <= 1.10 - SQL Injection vulnerabilityEPSS 0.4%CVE-2025-58602MEDIUMWordPress If-So Dynamic Content Personalization Plugin <= 1.9.4 - Cross Site Scripting (XSS) VulnerabilityEPSS 0.2%CVE-2025-49875MEDIUMWordPress If-So Dynamic Content Personalization plugin <= 1.9.3.1 - Cross Site Scripting (XSS) VulnerabilityEPSS 0.2%CVE-2026-100507HIGHWordPress If-So Dynamic Content Personalization plugin <= 1.10.1 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.2%