CVE-2026-101924Published
NewStatPress <= 1.4.5 - Unauthenticated Stored Cross-Site Scripting via 'urlrequested' Attribute via Query String
Explicit identifiers and source references
These records connect through source-stated identifiers. Shared identifiers or dates alone do not establish shared exposure, root cause or applicability.
CVE-2026-101924 · Microsoft / collected KEV context
cve-program · CVE-2026-101924
- https://www.wordfence.com/threat-intel/vulnerabilities/id/234d79fc-5f00-457d-a693-ad3f6d38447b?source=cve
- https://plugins.trac.wordpress.org/browser/newstatpress/tags/1.4.5/includes/nsp-overview.php#L320
- https://plugins.trac.wordpress.org/browser/newstatpress/tags/1.4.5/newstatpress.php#L839
- https://plugins.trac.wordpress.org/browser/newstatpress/tags/1.4.5/newstatpress.php#L1447
Related operational evidence
Explicit CVE identifiersNo related operational record is retained in the current change model.