Signal is active with 3 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
The Rent Fetch plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'keyword' parameter in all versions up to, and including, 0.32.4 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
NONE
Momentum
NONE
CVE-2026-1931 Stored XSS Vulnerability in WordPress Rent Fetch Plugin via 'keyword' Parameter https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-1931
Post summary
The entry announces CVE‑2026‑1931 as a stored XSS flaw in the WordPress Rent Fetch Plugin’s ‘keyword’ parameter, with no PoC, exploit code, or patch details provided.
⚡ New CVE Alert: CVE-2026-1931 📊 Severity: 7.2 🚨 Risk Level: High 🧩 Affects: Wordpress Reference: https://nvd.nist.gov/vuln/detail/CVE-2026-1931 #CVE-2026-1931 #CVE #High #Wordpress #CyberSecurity #InfoSec https://t.co/7A84zwoovl
Post summary
A new CVE-2026-1931 affecting WordPress has been announced with a severity score of 7.2, but no further details on exploitation or remediation are provided.
CVE-2026-1931 The Rent Fetch plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'keyword' parameter in all versions up to, and including, 0.32.4 due to insuffi… https://www.cve.org/CVERecord?id=CVE-2026-1931
Post summary
The Rent Fetch WordPress plugin versions up to 0.32.4 are vulnerable to stored XSS via the 'keyword' parameter, as identified by CVE-2026-1931.