What’s Vulnerable › Products

x-raym WaveSurfer-WP vulnerabilities

1 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 1 published in the last 12 months.

Check whether your x-raym WaveSurfer-WP version is affected

Latest x-raym WaveSurfer-WP vulnerabilities

• CVE-2026-1909 — WaveSurfer-WP <= 2.8.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'src' Shortcode Attribute (CVSS 6.4)