Zero Day Monitor
ZDM
Dashboard
Vulnerabilities
Trending
Zero-Days
News
About
Login
CVE-2026-93622: WordPress WPS Limit Login plugin <= 1.5.9.3 - Cross Site Scripting (XSS) vulnerability — Zero Day Monitor
← Back to list
7.1
CVE-2026-93622
KEV
EXPLOITED
nicolaskulka · wps limit login
WordPress WPS Limit Login plugin <= 1.5.9.3 - Cross Site Scripting (XSS) vulnerability
Description
Unauthenticated Cross Site Scripting (XSS) in WPS Limit Login <= 1.5.9.3 versions.
Affected Products
Vendor
Product
Versions
nicolaskulka
wps limit login
n/a
References
https://patchstack.com/database/wordpress/plugin/wps-limit-login/vulnerability/wordpress-wps-limit-login-plugin-1-5-9-3-cross-site-scripting-xss-vulnerability?_s_id=cve
(vdb-entry)
Related News (1 articles)
Tier C
VulDB
4d ago
CVE-2026-93622 | NicolasKulka Wps Limit Login Plugin up to 1.5.9.3 on WordPress cross site scripting
→ No new info (linked only)
Discussion (0)
Loading…
CVSS 3.1
7.1
HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L
CISA KEV
✅ Yes
Actively exploited
✅ Yes
CWE
CWE-79
Published
Sep 23, 2026
Trending Score
52
Source articles
1
Independent
1
Info Completeness
0/14
Missing: cve_id, title, description, vendor, product, versions, cvss, epss, cwe, kev, exploit, patch, iocs, mitre_attack
Community Vote
0
Login to vote
0 upvotes
0 downvotes
No votes yet
Pin to Dashboard
Verification
State:
unverified
Confidence:
0%
Vulnerability Timeline
CVE Published
Sep 23, 2026
Added to CISA KEV
Sep 23, 2026
Actively Exploited
Sep 23, 2026
Discovered by ZDM
Sep 23, 2026