CVE-2026-92409: medium-severity vulnerability in Donation Thermometer
Donation Thermometer 2.2.9 - 2.2.11 - Contributor+ Stored XSS via Shortcode
Published · Updated
33Vexday Risk Score
No sign of exploitation. It has a public proof of concept.
ssvc Attendcvss 6.8epss 0.3%
exploitation probability
0.3%top 76% of all CVEs
observed exploitation
nono source reports it
1 public exploit(s)
The Donation Thermometer WordPress plugin before 2.3.0 does not escape a colour value taken from a shortcode attribute before using it in an attribute of the generated legend markup, allowing users with the Contributor role and above to inject arbitrary event handlers that execute when the page is viewed.
CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:H
Affected products
Unknown · Donation Thermometerpublic PoCs found — 1
cve_referencewpscan.com/vulnerability/1c74b76e-fd6f-4dbc-aba1-f7de2444ee95/unverified⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.
Related CVEs — Donation Thermometer
In the same product, most dangerous first.